Skip to content
MemorialPrintKit

Privacy

Last updated 2026-09-11

The photograph is never uploaded. There are no accounts on this site, no password to lose and no database of users. What follows is the complete list of what happens to data, in the order you are likely to meet it.

The photograph

It stays on your computer. Reading the file, measuring what it can print at, lifting the person away from the background, enlarging it, cropping every frame size and building the ZIP all happen inside your own browser. There is no server that receives the image, which means there is nothing that could keep a copy of it even by mistake.

You can check this rather than take our word for it. Open your browser's network tools, put a photograph through the free check, and watch: no request carries the image. The only large downloads are the software that does the work, coming to your machine.

Your browser keeps two things locally, on your own disk. The processing software is cached, so it does not download twice. And if you pay, the payment reference and the photograph's fingerprint are remembered, so that photograph stays unlocked in this browser. The photograph itself, and your work on it, live only in the open tab and are gone when you close it. Clearing your browser's site data for this site removes the rest. None of it is visible to us.

Visiting the site

Pages are static files. The host records ordinary web server logs — IP address, user agent, which page — which is unavoidable and is how every website on the internet works.

Analytics are Google Analytics 4, and the tag is not loaded until you interact with the page: move the pointer, scroll, tap or press a key. A visitor who arrives and leaves without touching anything is never counted, and never has a request made to Google on their behalf. That is a deliberate trade — the numbers are lower than the real ones, and nobody is tracked for arriving.

There are no advertising trackers, no session recording, no heatmaps, no chat widget and no embedded fonts fetched from anyone else. No third-party script runs before you touch the page.

The contact form

What you type is emailed to us, through Resend, and goes nowhere else. It is not stored in a database, because there is no database. Your address is used to reply to you and is not added to any list.

The form is protected by a signed token rather than a CAPTCHA, so nothing about you is sent to a third party to prove you are human.

There is no way to attach a file to the form, and that is deliberate: nothing about this tool needs the photograph, and the point of everything above is that we never have a copy of it.

Paying

Payment is handled entirely by Stripe. Card details are entered on Stripe's own page and never touch this site — we never see a card number, and there is nothing here for one to be stored in.

One thing derived from your photograph does leave your computer, and it is not the image. A purchase unlocks the one photograph it was bought for, and the way that works with no database is a fingerprint: a SHA-256 hash of the file's bytes, 64 hex characters, sent to our checkout endpoint and stored in the Stripe payment record. When you come back, the fingerprint of the photograph in front of you is compared against it. A hash cannot be turned back into a picture and tells us nothing about what the photograph shows — but it is derived from your file, so it is listed here rather than left out.

There is no license key and no account. Your browser remembers the payment reference next to the fingerprint, and each time you export, our endpoint asks Stripe whether that payment is real and was made for that fingerprint. Nothing about the purchase is stored on our side.

Stripe asks for an email address at checkout and keeps it in its record of the payment. We use it only to reply if you write to us about that payment. We send no marketing email, and there is no list to be added to.

Third parties, in full

  • The web host — serves the pages and keeps ordinary server logs: IP address, browser, which page.
  • Stripe — takes the payment and keeps the record of what was paid for, including the photograph’s fingerprint.
  • Resend — delivers contact-form messages to our inbox.
  • cdn.memorialprintkit.com (Cloudflare R2) — our asset host. It sends the processing software and the ready-made backgrounds to your browser. Files come from it; nothing of yours goes to it.
  • Google Analytics 4 — counts visits, and loads only after you first interact with a page.

That is the whole list.

Your data

Since there is no account, there is very little to ask for — but if you want to know what Stripe holds against your purchase, or want the contact-form email deleted from the inbox,ask and it will be done.

The photograph is not on that list, because it was never ours to delete.