Privacy

Your photos

Your photos are never uploaded, transmitted, or seen by us. Raw decoding, editing, cropping and export all run inside your browser, on your machine, using WebAssembly and WebGL. The site works with your files without ever receiving them. There is no server that could keep a copy of your photo, because no copy of it is ever sent.

What we do keep

• Your account, if you create one. Any export during the free trial needs an account. The whole record is: your email address, when the account was created (that's when the trial started), a count of your exports, and which products you own. Nothing else. Ask and we delete it.
• A trial export check. When you export during a trial — JPEG, PNG, WebP or full-size RAW — your browser asks our server for permission first. That request carries only your signed sign-in token — no image data, no filename, no dimensions, no edit settings. The photo itself is rendered and saved entirely on your machine.
• Purchase records. If you buy a licence, our payment processor (Stripe) handles the payment; we keep the licence key, your email, and the purchase date so the licence can be restored and refunded.
• Your beta email. If you joined the beta at /login, we store the email address you entered, and use it only for beta and launch news. Ask and we delete it.
• Anonymous page counts. We use Vercel Web Analytics. It runs on every page of this site, the editor at /app included, and inside the Mac and iPhone apps, because those load the same editor. It is cookieless and does not identify you. What it records is that a page was opened, which page it was, and the usual request metadata any web server sees: a referrer, a coarse country, a device type. There is no account link, no cross-site tracking, and nothing about your photos, your filenames, or your edits. We see that pages were visited, not who visited them.
• A pack download, if you own one. The C-41 and Grainhouse colour tables are delivered from our server when your licence checks out, then cached in your browser. That request carries your entitlement token and the name of the stock you selected. It carries no image data, and nothing about your photo travels with it.
• An IP address, briefly, on sign-in. When you ask for a sign-in link we rate-limit the request by IP so nobody can use the form to spam an inbox. The address is held only as a short-lived counter key and is not stored on your account.

What we don't do

• No cookies for tracking, no fingerprinting, no advertising pixels.
• No selling or sharing of any email list with anyone.
• No passwords — signing in is a one-time email link. Browsing and editing need no account at all; any export does. Your edits stay in your browser.

Stored on your device

The app keeps small items in your browser's local storage: your theme, your sign-in session, your licence tokens (if you activated a key), the email you signed up with (as a local backup), and a random number generated on this install that ties an activated licence key to this browser. That number is created on your machine, is never used to recognise you anywhere else, and is only sent when you activate a key.

The app also remembers your edits, in a small database inside the browser. For each photo you have adjusted it keeps the slider settings and enough to recognise the file again: its name, its size in bytes, and the date it was last changed. That is so reopening the same photo can offer to put your work back. No image data is stored. Not the raw file, not the decoded picture, not a thumbnail, not one pixel. None of it is ever sent anywhere, and restoring an edit is always something you choose, never something that happens on its own. The most recent 40 photos are kept; older entries are dropped. Reset a photo back to untouched and its entry is deleted.

If you own a film pack, the app also caches that pack's colour tables in your browser's cache storage so it works offline. Clearing your browser data removes all of it, saved edits included. Sign in again or re-activate your key to restore.

Questions

Email hello@rawroom.app and we'll answer.