Privacy
The short version: your images never leave your device. The only thing this site ever sends us is a feedback note or an email address that you choose to type in and submit.
Last updated 14 November 2026
What happens to an image you open
Cutline is a single web page. When you choose an image, the browser reads it
from your disk into a <canvas> element, and all the tracing,
thresholding, smoothing, and SVG writing happens in JavaScript running on your
machine. The finished SVG is assembled as text in the page and handed to your
browser's own download mechanism.
There is no upload step, no server-side processing, no queue, and no account. We do not receive your image, your text, or your SVG. The page is built so that its only possible same-site request is the feedback/signup form described below, and that form has no access to your image or your SVG.
You can verify this. Open your browser's developer tools,
switch to the Network tab, and trace an image. You will see no request carrying
your file — only the page's own assets and, if you open the font picker, a
stylesheet from Google Fonts. A request to feedback.php appears only
if you press Send on the feedback panel or the sign-up form.
Fonts: the one third-party request
The interface uses three typefaces, and the Text tab offers about ninety-five
more, all served by Google Fonts. A font is fetched from
fonts.googleapis.com and fonts.gstatic.com the first
time it is needed.
That request tells Google your IP address, your approximate location derived from it, your browser and operating system, and which font was asked for. It tells Google nothing about your image or your design — only that a font was wanted. Google's handling of it is governed by Google's privacy policy, not this one. If you never open the font picker, only the three interface faces are requested.
What you choose to send us
There are two optional forms on this site. Nothing is sent until you press their send button.
- The Feedback button sends the note you typed, the face you
picked (if any), the name you typed (if any), the email address you typed (if
any), and a one-line description of where you were in the app. That line is
shown to you in the panel before you send, and looks like this:
tab: image, version: bold, layers: 3, size: 6in, window: 1440×900. It never includes your image, your SVG, a file name, or your IP address. - The “Tell me when there's news” box sends only the email address you typed.
These are stored on the site owner's own web server, in a file that is not reachable from the web, and are read by one person. We use an email address only to write to you about Cutline news or a Pro version (if you signed up) or to answer your note (if you asked for a reply). We do not sell, share, or hand it to any third party, and no email is sent automatically. To have your address or note deleted, write to the contact address below.
To tell the owner a note has arrived, the text of a feedback note (never an email address, and never anything from the sign-up form beyond the fact that someone signed up) is relayed as a phone notification through ntfy.sh, a third-party notification service that handles that text under its own policy.
To limit abuse, the server briefly keeps a counter tied to a one-way hash of your IP address that changes every day; the address itself is not stored.
What is stored on your device
Cutline may use your browser's localStorage to remember small
conveniences between visits, such as your light or dark theme preference or the
name you typed into the feedback panel. That
data stays in your browser, is readable only by this page, and is deleted when
you clear your site data. It contains no images and no personal information.
Your undo and redo history lives in the page's memory for the length of the session and is gone when you close the tab.
Analytics, cookies, and tracking
There are no analytics scripts, no advertising pixels, no session recording, no fingerprinting, and no tracking cookies. If this ever changes, this page will say so before it happens.
The web host serving this page keeps standard server logs — IP address, time, and the file requested — as every web server does. Those logs contain no image data and are used only to keep the site running.
Children
Cutline is not directed at children and does not knowingly collect personal information from them. The only personal information it can receive is an email address or name someone chooses to type into the forms above.
Your rights
Rights of access, correction, deletion, and portability under the GDPR, the CCPA, and similar laws apply to personal data a service holds about you. The only personal data Cutline can hold is what you submitted through the forms above. Write to the address below and we will tell you what we hold, correct it, or delete it.
Changes
If this policy changes in a way that affects how your data is handled, the date at the top will change and the change will be described here rather than quietly folded in.
Contact
Questions about this policy: