The short version
Everything runs in your browser. We don't see your images, your messages, or your passwords. We don't have a server that receives them.
1. What We Collect
Nothing about your content. All encoding and decoding happens locally in your browser using JavaScript. Your images, messages, and passwords never leave your device.
We do not operate a backend server that receives your data. There is no account system, no upload step, and no telemetry tied to your content.
2. What Our Hosting Provider May Collect
When you visit the site, our hosting provider may automatically log standard technical information, including:
- IP address
- Browser type and version
- Pages requested and timestamps
- Referring URL
This information is used for security, abuse prevention, and aggregate traffic analysis. It is not linked to anything you encode or decode.
3. Cookies and Local Storage
We do not use tracking cookies. The Service may use browser local storage to remember your preferences (such as your selected output size). This data stays on your device and is never transmitted.
4. Third-Party Services
The Service loads from a hosting provider and may use a CDN to deliver static assets. These providers operate under their own privacy policies. We do not embed analytics scripts, advertising networks, or social media trackers.
5. Your Encoded Images
When you download an encoded image, what happens to it next is up to you. If you upload it to a social network, messaging app, or image host, that service's privacy policy applies — and many such services recompress images, which will destroy the hidden message.
6. Children
The Service is not directed at children under 13. We do not knowingly collect information from children.
7. Changes to This Policy
We may update this Privacy Policy from time to time. The "Updated" date at the top of this page reflects the most recent revision.
8. Contact
Questions about this policy can be sent to [email protected].