Your photos stay in this tab.
Listing photos, prices and your phone number are your business. Here is what this site does with them, and how to check without taking our word for it.
What happens to your photos
You choose photos. Your browser lets the page read them from your device. The page decodes and resizes them, draws every frame of the reel on a canvas, and your browser's own video encoder (WebCodecs, or the browser's recorder where that is all it has) turns the frames and the music into an MP4. The open-source mediabunny library that writes the MP4 is bundled with the site, not loaded from anywhere else. The finished file is held in memory and handed to you as a download. Your photos, the text you type and the reel are never sent to a server.
What this page can connect to
Every page carries a Content-Security-Policy that your browser enforces. For this site it allows connections to this site itself (the page, its script and style, the four music tracks when you choose or preview one, and the sample photos if you press Use sample photos) and to our license server, which is contacted only when you activate Pro or when a Pro license is due for its re-check every 3 days. It sends the license key and a device label, nothing else. Fetch, XMLHttpRequest, WebSocket and beacons to any other address are refused.
Advertising measurement
This site currently loads no analytics, advertising or tracking scripts at all.
How to check it yourself
- Open the home page and open developer tools (F12, or Option+Command+I on a Mac).
- Go to the Network tab and clear it.
- Add photos, fill in the details and make a reel.
- Look at the requests. You will see this site's own files (the music file for your chosen track, sample photos if you used them) and, for Pro licenses that are due, a request to the license server. There is no request that carries a photo or the reel.
- For a harder test, turn on airplane mode once the page has loaded and make a reel. It works.
- Or open the Console and run
fetch('https://example.com'). The browser refuses it and names the policy that blocked it.
What is stored in your browser
- Your name, phone number and brokerage, so the next reel is quicker. You can clear them by clearing site data.
- If you activate Pro: your license key and the confirmation from our license server, and, if you use them, your brand color, logo and headshot (saved as small images in your browser's local storage, not on a server).
These live in your browser's local storage on this site, and clearing site data removes them. Your photos and finished reels are held in memory only and disappear when you close or reload the tab, unless you downloaded the reel.
What the host can see
The site is served as static files. Whoever hosts it can see ordinary web-server information when you load a page, such as your IP address and which page you requested, the same as for any website. That happens when the page loads and does not include your photos. Pro checkout happens on Creem's own site after you click the Go Pro button, and is governed by Creem's privacy policy; the tool never sees payment details.
Limits of this promise
This protects your photos from leaving the page. It cannot protect you from a compromised computer, a browser extension that can read pages you open, or a copy of this site that someone else has altered. Use the real address.
Questions: contact@getplainsum.com