Privacy

Last updated 3 September 2026

The short version

The image you drop in is decoded, re-encoded and compared by code running in your browser. It is never sent to the server, never stored and never seen by anyone else — and neither is anything inside it, such as the camera model or location an image file may carry in its metadata. Visits are counted with self-hosted, cookie-free software on the same server — described below — and nothing else about you is collected.

Server logs

The web server records each request: IP address, timestamp, the path requested, HTTP status, referrer and user agent. This is standard web server behaviour and is used to keep the service running and to investigate faults and abuse. The legal basis is Art. 6(1)(f) GDPR — a legitimate interest in operating a secure, functioning service. Log entries are rotated and deleted in the ordinary course of operation and are not combined with anything else or used to build a profile.

Audience measurement

This site counts visits usingRybbit, running on the same server as the site itself. No data goes to a third-party analytics provider and none leaves the EU.

It sets no cookies and stores nothing on your device. Recorded per visit are the page requested, the referring page, and coarse information derived from the request — browser, operating system, device type, and country. IP addresses are used to derive the country and are not stored alongside it. Nothing is combined into a profile and nothing identifies you personally.

The legal basis is Art. 6(1)(f) GDPR, a legitimate interest in knowing which pages are read. Because no information is stored on or read from your device, § 25 TDDDG does not require consent — which is why there is no cookie banner. You can suppress the measurement with any content blocker, or by sending Do Not Track; the site works identically either way.

What this site does not do

• No cookies, no local storage of visit data, no session identifiers.
• No advertising, no tracking pixels, no cross-site tracking.
• No third-party services beyond the audience measurement above. Fonts are the ones already on your system; nothing is fetched from a CDN.
• No accounts, no sign-up, no email collection.
• No transmission of the images you drop in, and none of their metadata. They stay in the tab and are gone when you close it.

The appearance setting is the one thing kept on your device: choosing light or dark stores that word in your browser's local storage so the page does not flash the wrong colours on the next visit. It is never sent anywhere.

Hosting

The site is hosted on a dedicated virtual server in Germany. There is no content delivery network and no reverse proxy operated by a third party between you and it, so the connection ends at that server.

Your rights

Under the GDPR you may request access to personal data held about you, as well as its correction or erasure, object to processing, and lodge a complaint with a supervisory authority. In practice the only personal data here is a log entry containing your IP address; to identify it you would need to state the approximate time of your visit.

Controller

Responsible for this site under Art. 4(7) GDPR:[contact address pending]

This site is a personal, non-commercial project. It carries no advertising, sells nothing and has no paid features.