Privacy, with your photos in mind

Your photos stay in this browser

Photos selected in the print tool are decoded, cropped and assembled into a PDF on your device. The print workflow does not upload your images to our server. We do not send image filenames, EXIF, photo hashes or photo content in site analytics.

The active project is held in memory in the current tab. Save on this device stores your photos, any retained original images, styles and settings in this browser’s IndexedDB. Autosave is optional and starts off. Restore saved project reopens that draft; Remove saved draft deletes it. Clear project only clears the open project. Browser cleanup, private browsing or device storage pressure can remove saved drafts.

Download project backup creates a portable .pclab file containing your photos and project settings. Keep it private, especially on shared devices. PDF, image ZIP and backup downloads remain on your device until you delete them. No cloud backup is created.

Site requests and analytics

Loading this website sends ordinary network requests to its hosting infrastructure. Those requests may include connection information such as an IP address and browser headers. The print tool does not need an account or a photo upload.

Optional background removal and 3× enhancement download fixed model files from Hugging Face and its us.aws.cdn.hf.co download host only when you choose an enhancement action. The host receives ordinary connection metadata such as your IP address. Your selected photos are processed locally in a browser worker and are not included in those requests. Model caching depends on your browser; browser controls can clear cached files.

The site supports limited, allowlisted interaction events such as template selection and a PDF download request. Photocard-specific remote collection is disabled by default until the receiving platform has been verified. A download request does not prove that a file was saved or printed.

Optional Google sign-in

When Google sign-in is configured, you can choose to sign in to manage an account for this website. Google handles account selection and authentication. Our account service verifies that response and keeps your Google account identifier, email address and display name for this site, together with server-side session and security records.

Sign-in uses first-party security and session cookies. Session cookies are HttpOnly and are not available to page scripts. Your account is separate from accounts on other sites using the same platform. Signing in does not upload or sync your photos, local drafts or project backups; local drafts are shared by anyone using the same browser profile. Signing out ends the account session but does not delete those local files or drafts.

Your choices

You can use the tool without signing in. Only select images you want to process on this device, and avoid using a shared browser for private photos. No cloud backup is created by the print workflow.

Contact details, when configured by the site operator, are available on the Contact page. If no public email is provided, that page states this explicitly.