What this tool is
The Photo Lab is a static web page that runs in your browser. When you visit, your browser downloads the page's HTML, CSS, JavaScript, and fonts from a hosting provider and a content delivery network (CDN). After that, every photo operation you perform — adding photos, cropping, resizing, generating the PDF — happens locally on your device.
What we collect
Photos you upload
We don't collect them. When you click "Add photos" and choose images, your browser reads them from your local disk into the page's memory. They never leave your device. There is no upload endpoint. You can verify this yourself by opening your browser's developer tools (Network tab) and watching while you use the tool — you'll see no outbound image requests, regardless of whether you've accepted analytics.
Analytics data — only with consent
On your first visit, you'll see a consent banner asking whether you want to allow Google Analytics. If you click Reject, the analytics script never loads and no analytics data is collected. If you click Accept, Google Analytics 4 (GA4) is loaded with the following configuration:
- IP anonymization is enabled (
anonymize_ip: true) — Google truncates the last octet of your IP before logging. - Google Signals are disabled — no cross-device tracking or remarketing audiences.
- Ad personalization signals are disabled — your data is not used for targeted advertising.
With analytics enabled, GA4 collects standard page-view data: which pages you visit, how long you stay, your approximate location (country/city, derived from anonymized IP), device type, browser, referrer (which site linked you here), and basic interactions such as PDF downloads. GA4 also generates a client identifier stored in your browser's localStorage to recognize return visits.
We use this data only in aggregate, to understand how many people use the tool and which features they use. We do not use it to identify individuals. Google may retain and process this data according to their own policies; see Google's Privacy Policy and how Google Analytics handles data.
Changing your analytics choice
You can change your decision at any time by clicking Cookies in the footer of any page. This re-opens the consent banner. If you switch from Accept to Reject, we'll remove the GA script from the current page and clear the GA client identifier from your browser storage.
Cookies
The Photo Lab itself does not set any cookies. Google Analytics, when enabled, may set cookies for session tracking (typically _ga and _ga_*). These are only set if you accept the consent banner. If you reject, no cookies are set.
Server logs
Standard hosting providers automatically log basic information about each request to a web page: IP address, user-agent string, the URL requested, the time of the request, and the HTTP status code. We do not control or actively use these logs beyond what the hosting provider does by default for security and infrastructure operation.
Third-party services used
The page loads a small number of resources from third parties to function:
- Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — for the Fraunces and JetBrains Mono typefaces. Google Fonts may log IP addresses. See Google's Privacy Policy.
- Cloudflare CDN (cdnjs.cloudflare.com) — for the jsPDF JavaScript library used to generate the printable PDF. See Cloudflare's Privacy Policy.
- Google Analytics (googletagmanager.com, google-analytics.com) — only loaded if you accept the consent banner. See Google's Privacy Policy.
None of these third parties receive your photos or any information about the content you're working with inside the tool.
Data retention
Photos: not retained on our side at all. They exist only in your browser tab and are discarded when you close or refresh it.
Analytics (if you consented): Google Analytics retains event data according to your account's data-retention settings, typically 2-14 months. We do not store analytics data separately. If you'd like analytics records associated with your visits to be deleted, contact AppWeave Labs and we'll process the request through Google's data-deletion tools.
Consent choice: your accept/reject decision is stored in your browser's localStorage under the key tpl-consent-v1. Clearing your browser data removes it. Using the "Cookies" link in the footer also clears and re-prompts.
Children's privacy
The Photo Lab does not knowingly collect personal information from anyone, including children under 13. Since the tool collects no identifying information from any user, this applies equally to all visitors regardless of age.
Your rights
Depending on where you live, you may have legal rights regarding personal information held about you (for example, under GDPR in the EU/UK or CCPA in California). Because we do not collect or store personal information from you when you use The Photo Lab, there is generally nothing to access, correct, or delete on our side. If you have a question about this, contact AppWeave Labs (link in the footer).
If this ever changes
If the tool's design changes in a way that affects privacy — for example, if a future version introduces an optional cloud-save feature, an analytics provider, or any other data collection — we will update this page with a clear description of the change and the date it took effect. The current state is what's described above.
Contact
Questions about this privacy policy can be directed to AppWeave Labs via the contact information on their website.
See also: Terms of Service, About, FAQ.