Privacy

Pictures are not transmitted. There is no account to make, no file is stored, and the site has no server that could receive one. The one third-party service on these pages is a cookieless page-view count from Cloudflare, and it runs only on flippicture.com itself. It sees the ordinary parts of a web request — the page address, the referring page, a browser string, a country — and never the contents of anything you open in the tool. This site carries no advertising.

Choosing, dropping or pasting a picture hands the browser a reference to bytes on your own device. The page reads those bytes, asks the browser to decode them, resolves the orientation flag, and holds the result in memory as a bitmap. The reflection is drawn onto a canvas. The export is produced by asking the browser to encode that canvas, and is handed to you through the same download mechanism any link uses. The check that compares a saved file with its source decodes that file here too.

Nothing in that sequence writes to disk, to a database, to local storage or to a cookie, and nothing in it sends the picture anywhere. Closing the tab discards all of it. If the page is left open, the decoded bitmap stays in memory until it is replaced or the tab is closed, which is the ordinary behaviour of anything you have opened in a browser.

The one file that is fetched on demand is the HEIC decoder, and only when a HEIC picture is opened. That is a request for a code library from this site, not a request that carries your picture. The picture is decoded after the library arrives, here, in the tab.

Cloudflare Web Analytics counts aggregate page views on flippicture.com. When a page loads on that domain, a small script from Cloudflare reports the page address, the referring page, coarse device and country information, and how quickly the page loaded, to a property that belongs to this site alone.

It runs only on flippicture.com. A copy of these pages opened anywhere else — a preview build, a local development server — never loads the script, so it sends nothing. The script sets no cookie and no identifier, does not follow anyone between sites, and no event is sent for opening, flipping, checking or saving a picture: it cannot know that a picture was opened, let alone which one.

This site carries no advertising. No advert script is loaded, no advertising cookie is set and no request goes to an ad network from any page. If that changes, this page will say so before it happens.

No picture, no file name, no dimensions, no metadata read out of a file, no export, and no record that any of those existed. There is no account system, so there is no email address, no password and no profile. The tools never ask you to identify yourself; the one place a name is asked for is the contact page, described next.

The contact page is the only part of this site that sends anything you typed. When you press its send button, it posts the name, email address and message you typed, plus the name of this site, to a Google Form, and Google stores that response under its own policies. Nothing is sent while you type or before you press the button, and no picture, file or tool setting is ever part of it.

If this policy changes in a way that affects what leaves your device, the change is described on this page rather than summarised as an update to terms. To write about it, or about anything else here, use the contact page.