Privacy policy

Effective 3 September 2026

The crop is drawn on a canvas in this tab. No copy of your photo is sent anywhere. This policy is short because the site is simple.

Your photos

Photos you open in CropPhoto are read by your browser and processed on your device. They are not transmitted to us or to anyone else. The site has no upload endpoint. Cropped files are generated in your browser and saved by your browser's normal download mechanism. Image data is never written to cookies, local storage or any other persistent storage; when you close or reload the page it is gone. This is true of the smart crop suggestion as well: the model travels to you, the photograph does not travel anywhere.

The one download from another domain

The smart crop suggestion on AI Smart Crop uses two small machine-learning models, and they are not part of the page — they are downloaded when you ask for a suggestion and not before. Pressing that button makes one request each to our own file store, a separate host run by the same people as this site, for a face finder of 229,738 bytes and a subject mask of 6,163,938 bytes. The WebAssembly runtime that executes them (13,986,063 bytes) is served from this domain, so 19.4 MB arrives in total, once.

That request carries what any browser request carries — your IP address, the time, and which file you asked for. It does not carry your photograph, any part of it, or anything derived from it, and there is no endpoint here or there that could accept one. The models run on your own processor. Nothing is sent back.

Decline the download — the No download button next to it — and none of that happens: nothing is fetched, nothing is stored, and you still get a suggested crop, worked out from picture detail in your browser, along with every manual control the site has.

Face geometry, and what the download says about the file

When a suggestion runs, the models return rectangles — where a face is, where the subject is — as numbers in this tab. Those numbers are used to place the crop box and to write the verdict line under the workspace, and then they are discarded with the page. No measurement is stored and none is transmitted.

One thing is written into the file you download. When a document spec implies a print density, such as the 300 pixels per inch a 35×45 mm passport photo needs, that density is written into the exported JPG or PNG so the portal or the lab reading the file sees a resolution rather than bare pixels. Nothing else is added: no filename, no GPS, no camera fields. WebP does not receive it, and the contract block above the download button says so in words rather than implying it happened.

What the site stores on your device

Three things, and this list was wrong until 19 September 2026, when it said two. Your light/dark theme choice is saved in your browser's local storage under the key cp-theme, so the page does not flash on reload. If you dismiss the notice about our other tools, that dismissal is written to session storage, so it stays dismissed for this tab and is gone when you close it. And if you download the models, they are kept in your browser's cache storage so the second visit costs nothing — 19.4 MB of model and runtime files, and nothing about your pictures. Delete the models in the smart crop panel removes them. That is all of it.

Analytics and advertising

Cloudflare Web Analytics measures aggregate visits and page performance on this domain. Its beacon records the page requested, referrer, coarse country, browser and device category, and loading timings. It sets no cookie, builds no profile that follows you across sites, and receives no photograph, crop rectangle, preset choice or exported file. Search Console tells us which queries brought people here and nothing about any individual. Advertising is not switched on; if it is shown later, it will be served by Google AdSense below the tool. AdSense may use cookies and similar technologies as described in Google's policies, and you can control ad personalisation in your Google settings. No advertising is loaded inside the crop workspace.

The contact page

The contact page is the only place on this site that sends anything you type. When you press its Send button, the name, email address and message you entered are posted to Google Forms along with the site name, cropphoto.com, so the message can be answered from the right place. Before that press nothing is sent, and the page loads nothing from Google while you type. No photograph, crop or setting is ever included.

Contact

Questions about this policy can be sent to privacy@cropphoto.com, or through the contact page.