What happens to your files
- Nothing is uploaded. Reading, checking and rebuilding all happen in JavaScript running on your own machine. There is no server that receives images, because there is no server at all beyond the one that sent you this page.
- Nothing is stored. Your files are held in memory while the tab is open and are gone when you close it. Exported ZIPs are assembled in memory and handed to your own browser's download.
- You can verify this. Open your browser's developer tools, go to the Network tab, and drop a file in. No request is made.
The one request this page can make
- Checking a licence key. If you enter a licence key, the key itself is sent to Gumroad to confirm it is valid and, for subscriptions, still active. That is the only outbound request this site is capable of making, and it carries nothing but the key you typed and the product identifier.
- Enforced by the browser, not by our promise. The page ships a
Content-Security-Policy that permits connections to exactly two places: this site
itself, and Gumroad's licence endpoint. Your browser blocks anything else. Even if
we made a mistake in our own code, your artwork could not be sent anywhere — and
a large image could not be smuggled through the licence check, because the request
carries a key, not a file. You can read that code in
assets/licence.js. - If you never enter a key, no outbound request happens at all. The checker is free and works without one.
What is stored locally
- A licence key, if you enter one. Kept in your browser's local storage on your own machine so you do not have to type it again. Clearing your browser data removes it. It is never sent anywhere.
What we collect
- Nothing personal. No accounts, no cookies set by us, no analytics script, no advertising, no tracking pixels.
- Standard server logs. The page is hosted on Cloudflare Pages, which records ordinary request logs (IP address, timestamp, user agent) as any web host does. That applies to the page itself, not to your files — your files are never part of a request.
Why it is built this way
- Unreleased artwork is the most sensitive thing a designer has. The safest way to handle someone else's unreleased work is to never receive it. Processing in the browser is not only a feature — it removes the question of what we might do with your files, because we never have them.