Privacy

Pictures you open here are read by your own browser and are never transmitted. Text you type into any field on this site stays in that field. There is no account, no login, and nothing that stores a description between visits. The site is a set of static files; there is no endpoint here that could receive a file even if something tried to send one.

Choosing, dragging or pasting a file hands it to the browser’s image decoder. The decoded pixels live in the tab’s memory while you are working. A thumbnail no longer than 192 pixels is drawn onto a canvas so the measurements can be taken, the canvas is discarded immediately afterwards, and the whole lot is released when you open another picture or close the tab.

Nothing is written to storage. The site does not use local storage, session storage or a database in the browser, and a build check fails if one of those appears in the image code or in any component. Opening the same picture tomorrow is exactly as new to this page as it was today.

It is an alt text checker. You open a picture, it measures the picture, you write the sentence, and it grades the sentence. Nothing here recognises a subject and nothing here generates a description, which is worth stating on the privacy page too: a tool that cannot see what is in your photograph is a tool with markedly less to be careful with.

If a describer release is ever published here, its weights would be fetched from this domain and kept in the browser’s cache so a second visit does not repeat the download. That request carries the model file and nothing else: no picture, no description, no identifier. It is the only outbound request this site would make on your behalf, and in this release it does not happen at all, because there is no release to fetch.

There is no analytics property behind this domain. The token in the build is still the placeholder the scaffold shipped, the layout refuses to render the beacon while it is, and no page views are counted anywhere on this site — so nothing here is measuring you as you read it.

If that changes, the intention is Cloudflare Web Analytics, which sets no cookie and builds no profile across sites, and which would see roughly what a server log sees: which page was asked for, the rough region it was asked from, the browser family, and a coarse timing figure. It would still learn nothing about your picture, because nothing on the page would have anything to tell it. This paragraph is where that switch gets announced, and it will change before the beacon does.

No advertising is served here yet. The master switch in the build is off, no unit is requested, and no advertising script loads on any page in this release — so nothing you are looking at right now came from a third party. The rest of this section describes the arrangement that takes effect once the domain is approved and the switch is flipped, and it is written in advance because a policy that appears at the same moment as the first advertisement is a policy nobody had the chance to read.

The arrangement is Google AdSense, placed by hand below the working surface — never above it and never inside it. Google fills those bands, and sets its own cookies and identifiers through them to select and measure what it shows you, subject to its own policies and to whatever consent framework applies where you are. That part of a page is genuinely not under this site’s control, and pretending otherwise would be the dishonest version of this paragraph.

What the advertising cannot see is anything about your picture. It is not in the page, it is not in a variable the ad script can reach, and it never existed anywhere but in your own browser’s memory. A blocker that removes those units leaves every part of the tool working exactly as it did.

If any of this ever changes — advertising switched on, a measurement property created, a describer release published, anything at all that alters what leaves your machine — it changes here first and it changes in plain language. There is no version of this site where a picture is sent somewhere and the policy is quietly updated afterwards to match.