Privacy policy
Last updated: November 8, 2026.
Your photos stay in your browser
The free editor opens and edits JPG, PNG and WebP images on your device. We do not upload your original photo or exported image to a server, analytics service or error monitoring service. Editing data stays in memory; refreshing or closing the page clears the workspace. Downloads are saved according to your browser settings. We do not create accounts, photo galleries or cloud backups.
Optional anonymous usage counts
Analytics are off unless you choose “Allow anonymous counts.” We send only one of these event names to our own endpoint: tool_view, upload_started, upload_succeeded, sticker_added, preview_circle_toggled, download_clicked, download_succeeded and ai_interest_clicked. We do not send photos, filenames, image URLs, dimensions, names, email addresses, session IDs or user IDs. Download success means the PNG was created and a browser download was requested; it cannot confirm that a file was saved to disk.
Your consent choice is saved in local browser storage as pfpfest-metrics. Withdraw it at any time using Privacy settings in the footer. We respect browser Do Not Track and Global Privacy Control signals. No events are queued before consent, and opting out never limits the editor. Counts cannot identify individual people or reconstruct their sessions.
Hosting and technical requests
Your browser requests our pages, scripts and original decoration assets. Hosting infrastructure necessarily processes connection information, including IP address and request headers. These technical requests are separate from optional usage counts. The event handler logs only the approved event name; it never logs request bodies or photos. We use Cloudflare to host this site. Worker application logs are retained for up to seven days under the current plan and are accessible to the site owner through the hosting account. Invocation logs and tracing are disabled for this Worker; provider-added technical metadata may still accompany application logs. We use no advertising pixels or session recording.
AI features
AI avatar generation and payments are not available. No photos are sent to an AI provider. If those features launch, we will publish the provider, processing and retention details before accepting photos.
Contact and rights
Use our contact page for questions or privacy requests. Support messages pass through Cloudflare Email Routing to the owner’s email inbox. We use your address and message to respond to your request; support correspondence is separate from anonymous editor counts. Please do not send photos or sensitive personal details. For local photos, we hold no server copy to retrieve or delete. Browser storage settings let you remove your analytics preference.