spotifyedits.com Make a Canvas →
Privacy

Nothing about you is collected.

No account, no cookies, no session recording and no uploads. There is one anonymous page counter, and this page says exactly what it records, what the site contacts, and when.

Short version: your files are never uploaded, there is no account and there are no cookies. The one thing that is measured is anonymous traffic: how many people open the pages and whether the export button works for them. No names, no emails, no screen recording, nothing sold to anyone.

Your files

Photos and videos you open in the tool are read by your own browser. Cropping, encoding and export all happen on your machine through the WebCodecs API. Nothing is sent to a server, and nothing is stored after you close the tab. You can verify this: open your browser's developer tools, go to the Network tab, and export a Canvas. No request carries your file.

What the page contacts, and when

  • Pexels (api.pexels.com, images.pexels.com, videos.pexels.com) — only when you open the stock library or press "Surprise me". Your browser talks to Pexels directly, from your own IP address, and Pexels sees that request the way any website visit is seen. Their privacy policy applies to it.
  • jsDelivr (cdn.jsdelivr.net) — only when you export an MP4. The page loads one small library that packages the video file.
  • Spotify (open.spotify.com) — only if you click the player on the page. Until you click, no Spotify code loads and no request is made.
  • PostHog (eu-assets.i.posthog.com, eu.i.posthog.com) — on every page load. This is the anonymous counter described below. Servers are in the EU.
  • Nothing else. Fonts are served from this domain, so there is no request to Google. There is no advertising code, no ad-network pixel and nothing is sold or shared with anyone.

    Cookies

    None. The site sets no cookies at all, so there is no cookie banner to click. One random identifier is kept in your browser's local storage so a return visit is not counted twice. It contains no personal data, it never leaves your browser except as that random string, and clearing site data removes it.

    What the counter records

    Traffic is measured with PostHog, hosted in the EU. It records:

    • Page views, the page you came from, and rough location derived from your IP address at country level.
    • Browser, operating system and screen size, so the pages can be fixed where they break.
    • Clicks on buttons and links, and a few events of our own: a file was loaded, an export finished or failed, the stock library was opened, the file checker was used, the player was played. These events carry only what the tool was doing — which format was selected, whether an export finished — never your file, its name, its size or anything measured from it. The file checker event records only that the checker was run. One event does carry text you typed: the search word you use inside the Pexels stock library, so the built-in searches can be made better.

    What it does not do:

    • No session recording. Screen replay is switched off at the project level, because your photos and videos are on that screen. Nobody can turn it on for past visits.
    • No names, no emails, no accounts. There is nothing to identify you with, and no user profiles are created.
    • No cross-site tracking and no advertising. The data is not shared, sold or used for ads.

    If your browser sends "Do Not Track", nothing is recorded at all. Any tracker blocker also stops it, and the tool keeps working exactly the same.

    Hosting

    The site is static files served by GitHub Pages. Like any web host, GitHub processes the request your browser makes, including your IP address, to deliver the page. That is described in GitHub's privacy statement.

    Email

    If you write to a.zinoviev@me.com, I have your message and your address, and I use them only to answer you.

    Questions

    Ask at a.zinoviev@me.com. Last updated 3 September 2026.