Privacy

Short version: your images are processed in your browser and never uploaded. There are no accounts. We set one first-party analytics cookie (HttpOnly, 1 year) that holds a random visitor id, and we record the first page and source you came from. Pseudonymous usage events are also processed by our self-hosted analytics (Umami) on infrastructure we operate. There are no third-party trackers, no ad tracking and no advertising cookies.

Your images

The stencil maker decodes and processes every photo inside your own browser, in a background thread of the page. Images, stencils, PDFs, PNGs and SVGs are created on your device and are never uploaded to us or to anyone else. The same goes for the text you type into the name generator. Gallery designs you open in the editor are loaded from this site.

The analytics cookie

When you open a page, the site sets one first-party cookie named _v:

• What it holds: a random visitor id (for example v_ followed by 20 random characters) and the date of your last visit. It contains nothing about you or your images.
• How it is set: HttpOnly (scripts on the page cannot read it), Secure, SameSite=Lax, and it expires after 1 year.
• What we store with the id, once, on your first visit: the first page you opened and where you came from (the referring site, any utm_ campaign tags or ad click id in the link), your country as reported by our host, a rough device type (iPhone, Android, Mac, Windows or other) and a one-way hash of your browser's user agent string, used only to spot automated traffic. Our analytics never store your IP address or the user agent itself.

Search engine crawlers and other self-identified bots do not get the cookie; we only count them per day.

Usage events

The page sends small events to this site at a few steps: when a page has loaded, when an image is opened in the stencil maker (and how: uploaded, dropped, pasted or a sample), when its first stencil preview is drawn, and when you export a stencil (the format, PDF, PNG or SVG, the stencil style, the paper size and, for PDFs, the number of sheets). The halftone generator sends one event per export (the format, the pattern and the cell size in millimetres, and for PDFs the number of sheets). The design composer sends one event when you finish composing (the layout, the number of art pieces and whether there is lettering, never the text) and one per export (the format, the paper size and for PDFs the number of sheets). The flash sheet maker sends one event per export (the format, the paper size, the grid, how many designs and whether numbers or prices are on, never the title, the text or the prices you typed). The idea and name generators send similar events (for example which lettering font was used, never the text you typed). They never contain your image. Each event is stored with the page it came from and your visitor id, so we can see how many people get from opening the tool to a finished stencil. Individual events are kept for 120 days, then only daily totals remain.

We use this data only to see whether the tool is useful and to improve it. We do not sell it, share it with advertisers or combine it with data from other sites.

Our self-hosted analytics (Umami)

To cross-check our own numbers, this site's server also sends each of the events above (and your first visit of the day, with the referring site and any utm_ tags) to our own installation of Umami, an open-source analytics tool. It runs on a server we operate and control (hosted by Railway, a cloud provider); no analytics company receives the data, and no script, pixel or extra cookie is added to the page: the event is sent from our server, not from your browser.

With each event our server passes along your random visitor id, your browser's user agent string, your browser's language and your IP address. Umami uses the IP address only to look up an approximate location (country, region and city) and, together with the user agent, to group events into visits; it does not store the IP address or the user agent string, only the derived browser, operating system, device type and approximate location. Events from automated traffic and from our own tests are never sent.

No third-party tracking

No third-party analytics, advertising or tracking scripts are loaded, and no advertising cookies are set. The analytics described above are our own, self-hosted, and never used for advertising. If that changes, this page will be updated first.

What our host sees

The site runs on Cloudflare Workers. Like any website, Cloudflare receives the technical data needed to deliver pages (such as your IP address, browser user agent and the URL requested) and keeps short-lived request logs (including the logs of this site's own Worker) for security and reliability. We use those logs only to fix errors. See Cloudflare's privacy policy.

Your choices

You can delete the _v cookie or block cookies for this site in your browser settings at any time. The stencil maker and every other tool keep working without it.

Changes

We will update this page if the way the site handles data changes.