Privacy

The short version: your photographs never leave your device, because there is nowhere here for them to go.

Your photographs

They are read, measured, combined and encoded inside your browser tab, by code running on your own machine. This site is a set of static files. It has no server that processes images and no endpoint that accepts an upload; the finished PNG is handed to you from your browser’s memory.

There is exactly one network request the tool itself makes, and it is worth naming precisely rather than claiming a round number. If you drop a RAW file, it downloads the RAW decoder — one 803 KB WebAssembly file from this same domain, /vendor/raw/rawlab.wasm — because it would be rude to make everyone who stacks JPEGs pay for it. That is a download, not an upload: it carries nothing about your files, it happens once, and after it the same rule holds. You can watch this for yourself: load the page, drop one RAW file, then disconnect from the network — every frame after that still stacks, because there is no other network step anywhere in its path.

The same applies to the metadata. Timestamps, exposure, focal length, camera model and serial number are read from the files to compute the sequence’s defaults, and they stay in the tab with the pixels.

What is stored on your device

Nothing except your browser’s own cache of this site’s files. No account, no cookie set by us, no saved results, no history of what you stacked, no local database.

What is measured

Anonymous, cookieless usage statistics, so we can tell whether anyone is using the tool: which page was visited, roughly where in the world from your IP address, which is not stored, and a small closed set of events such as “a stack completed” or “a download happened”. The complete list of event names is in /assets/analytics.js on this site and nothing outside it can be sent.

Those events carry no file names, no camera model, no frame count beyond one of three coarse ranges, no sky measurements and no image data of any kind. If your browser sends a Do Not Track signal, nothing is recorded at all.

What is not here

No advertising, no advertising network, no third-party scripts other than the cookieless analytics collector, no payment processor, no tracking pixels, no fingerprinting and no cross-site identifiers. That is why you were not asked to accept anything when you arrived.

Contact

Questions about any of this: contact us.