Privacy: what this site sees, and what it never receives

This site has no upload step. Pictures are read, arranged and saved by this tab, and a release test checks that no picture data leaves it while you merge.

The short version

There is no server here that accepts a picture. The site is a set of static files; when you open pictures, your browser reads them, arranges them and writes the result to your downloads folder. No account, no queue, no cloud storage, nothing to delete afterwards. The one thing that does count anything is a cookie-free visit counter, described below, and it is told nothing about your pictures.

What happens to a picture you open

It is read into memory as pixels, turned upright if the camera left a tag saying it should be, drawn onto canvases that are set to sRGB colour, and held for as long as the tab is open. Closing or reloading the tab is the end of it. This site writes nothing about your pictures to your device’s storage, and nothing about them is ever sent to us — names, sizes and settings included.

On the photo-and-signature page the saved file is re-encoded from the canvas, so camera details and location from the originals are not carried into it. The same is true of every merged file this site saves.

What this site keeps on your device

Only what you ask it to keep. The layout tools can save an arrangement — the settings of a layout, such as the number of columns, the gap, the colours, the page size and the file type — under a name you choose, so it can be used on other pictures later. Up to ten are kept in this browser’s local storage, a few hundred bytes each. An arrangement never contains a picture, a file name, a caption or a label’s text, it is never sent anywhere, and nothing is saved unless you press Save beside it. If your browser blocks storage, the tools work the same and the list stays empty.

What does go over the network

Being precise, because “nothing leaves your device” is a phrase that gets used loosely. Three things travel, none of them a picture:

• The site’s own pages, scripts, styles and fonts, from mergepicture.com.
• The HEIC decoder, also from mergepicture.com, and only at the moment you open an iPhone HEIC. That is code arriving, not your picture leaving.
• The visit counter’s script and its page-view report, on the live site only.

The file you save at the end goes into your own downloads folder. That is the point of it.

What the visit counter sees

On mergepicture.com, and nowhere else, each page loads Cloudflare Web Analytics — a cookie-free page-view counter on this site’s own account. It records the address of the page you are on, the page you came from, a rough country, the kind of browser and device, and how quickly the page loaded. It sets no cookie, keeps no identifier that follows you to other sites, and is told nothing about what you open or merge: no picture, no file name, no dimensions, no setting. A local copy of the site, or a preview of it on any other address, does not load the counter at all.

Cloudflare processes that report on our behalf. If you block it with a browser extension, every part of the site works exactly the same.

Advertising

There is no advertising on this site. No ad script is requested by any page. If that ever changes, this page will say so — and what an advertising partner would be able to see — before the first unit appears.

The contact form

The contact page has the only form on this site. Pressing its send button posts what you typed — your name, your email address and your message — plus this site’s domain to a Google Form. Nothing goes before that press, opening the page requests nothing from Google, and no picture can travel with it.

Children

This is a general-audience tool and is not directed at children under 13. Beyond a message someone chooses to send from the contact page, we hold nothing about anyone, so there is nothing held about a child either.

Checking it yourself

Open your browser’s network panel, merge some pictures and save the result. The list you will see is short: the page, its scripts and fonts, the HEIC decoder if one of your pictures is a HEIC, and — on mergepicture.com — the visit counter. Your pictures are not in it. If any of this ever stops being true, this page changes first.

Questions go through the contact page or to hello@mergepicture.com. Last reviewed 24 October 2026.