Last updated: November 1, 2026.

A print sheet built where the photo sits

PrintSheet’s layout tool runs in the tab you opened. Dropping in a photo decodes it with your browser’s own image pipeline, draws it onto a local canvas and renders the finished sheet in memory — the file never crosses the network because no upload endpoint exists. Disconnect after the page loads and the maker keeps working, which is the simplest proof we can offer.

For a document photo this matters more than for most images, and it’s why the tool was architected in-browser rather than as a cheaper-to-build server upload.

What remains, once photos are off the table

• No accounts or forms. Nothing to register for; the tool’s options are read by the page’s own script, not sent anywhere.
• Infrastructure logs. Cloudflare serves the files and keeps routine web-log entries — client IP, browser agent, request time, path — for delivery and protection. Ordinary plumbing, not tied to anything you do in the tool.
• A small counter. A cookieless tick per visit records page, referrer, CDN-reported country and stay length; our collector adds a visitor code that is a salted hash of IP and browser details and changes every day, so visits can’t be linked across days. Using the tool adds ticks that carry only an action name — upload when a photo is loaded, ready when its sheet is first drawn, dl:png / dl:jpg for a download, dl:test-sheet or dl:scale-… for the scale-check sheets, print for the print view, fb:yes or fb:no:rejected / fb:no:size / fb:no:usage / fb:no:other when you answer the one-question card that follows a download (buttons only, no text field) — or, when something goes wrong, a short fixed code such as error:decode (the file couldn’t be read) or error:fit (the photo size doesn’t fit the paper). Never the photo, its file name or your sheet settings.

Ad funding

Adsterra supplies display banners beside the content on wide desktop screens and one 320×50 banner below the tool or article on smaller screens. Loading an ad shares your IP address and browser details with Adsterra and its advertising partners; their own cookies or identifiers may be used where your browser permits them. See Adsterra’s privacy policy. Each banner runs in an isolated, sandboxed frame that cannot read this page’s inputs, uploaded images or browser storage. We do not pass tool inputs to the ad network. Advertising does not load on About, Privacy, Contact and Disclaimer pages. Blocking ads does not disable the tool. A separate 300×250 display ad sits between the upper and lower sections of longer content.

Retention, children, changes

Nothing to retain: no photo, no sheet, no form data reaches our infrastructure, and request logs rotate on Cloudflare’s schedule. A general-audience utility collecting nothing from anyone, of any age. If this policy changes, the update lands here with a new date — questions go to hello@passports.pics or the contact page.