Privacy

Paint is a private photo editor run by Malcolm for a small number of invited people. It is built so your photos never leave your device.

Your photos

• Photos are opened, analysed (body pose and outline) and edited entirely in your browser. They are never uploaded.
• Recent photos, their edits and thumbnails are kept in your browser's local storage (IndexedDB) on this device only. You can delete them at any time from the home screen or Settings.
• Exported images are re-encoded on your device, which removes location and other metadata.

What the server stores

• Your Google account basics: name, email address and profile picture.
• Sign-in sessions and any passkeys you add.
• Named slider presets you choose to save (numbers only).

Google sign-in

Google is used only to confirm who you are. Paint does not read your Google data beyond the basics above and never posts anything.

Where it runs

The app is hosted on Vercel and the small account database runs on Neon Postgres. No analytics or advertising trackers are used.

Deleting your data

Ask Malcolm to delete your account; this removes your account, sessions, passkeys and presets. Local photos are removed by clearing them in the app or clearing your browser's site data.