What this page computes, and what it transmits

Nothing you make here is sent anywhere. The design is a handful of numbers held in the page; the file is drawn by your browser and handed straight to your own download machinery. There is no account, no stored project, no cookie set by this site, and no file input for anything of yours to arrive through in the first place.

Moving a control changes a number in the page’s memory. The preview is recomputed on your processor and drawn on a canvas element. Pressing the download control draws the same design again at full size, in a worker thread inside your browser, encodes it with the browser’s own image encoder, and passes the result to the download mechanism as a blob that has never had an address anywhere.

The design is also written into the fragment of this page’s address — the part after the hash — so that a link reproduces it. A fragment is never transmitted with a request: it is handled entirely by the browser and does not reach the server that hands you this page, or any third party, unless you paste the link somewhere yourself.

Today, nothing. The typefaces, the stylesheet and the code all come from this site’s own domain, so a freshly opened page here makes no request to anybody else at all. Two third-party scripts are intended for it, and both are described before they arrive rather than after.

Measurement first. The intention is Cloudflare Web Analytics, which sets no cookie and follows nobody between sites. It is not running: the property token in this build is still a placeholder, the tag that would load the beacon is skipped for as long as that is true, and no visit to this site is recorded anywhere at present. If that changes, this section is what changes first.

Advertising second. This site is built to carry Google advertising on its reading pages — the library and the three written pages — and that is what is meant to pay for it. Google has not approved the domain, the switch in the code is off, and no advertising is shown here yet: no script, no reserved band, no unit. When it is approved, that script behaves as any third party does — it may set cookies, it can see the address of the page it sits on and the ordinary details of the request, and Google’s own policies, rather than anything written here, govern what is done with them.

What no advertiser ever gets is the design itself. A stack exists as numbers in your own browser and as text in your own address bar, and there is no code on this site that could hand either of those to anyone. Nothing is placed above or inside the generator, filled or empty, then or now.

Nothing by this site. No local storage, no session storage, no database in the browser, and no saved history of designs. Closing the tab ends it; the only thing that persists is a link you chose to keep.

If this changes, this page changes with it, and a change that added any transmission of what you make would be a change to what the site is rather than a revision to a policy. There is no contact form here, because a form collects something. The footer names PictureEditor.com as the group this site belongs to, in plain text rather than as a link, and the contact details for the group are on that site.

• AboutWhat this generator is for, and who keeps it.
• TermsThe terms of use.
• BgImageThe generator, opened on a design that is already drawn.
• LibraryForty starting points, each one a stack that stays editable.