Skip to content
DontTouch My Pic.
Colophon · §00

We built this because most image tools quietly upload your photos. We didn't want to be another one.

Privacy · Enforced static · CDN zero servers open standards

The short version.

DontTouchMyPic is a small set of image tools that run entirely inside your browser tab. Convert HEIC to JPG. Compress. Resize. Crop. Rotate. We don't have a backend. Your photos never hit a server — because there isn't one for them to hit.

We built the site because we got tired of using image converters that silently shipped our holiday snaps to some third-party bucket somewhere. "We'll delete it in 24 hours" is a policy. Not uploading at all is a fact.

Open source · MIT

Don't take our word for it — read the code.

The entire site is on GitHub. If you want to verify that nothing gets uploaded, the source is right there: every tool, every script, every network boundary. Open your browser's DevTools too while you're at it — you'll see the tool code load, and then silence.

github.com/NickPax/donttouchmypic
Manifest · §01

Our promises.

  • Your photos never leave your device.
    Not to us. Not to a third party. Not to anyone.
  • No sign-up, ever.
    No email, no password, no "unlock this feature".
  • No watermarks, no resolution caps.
    The output of the tool is the output. Nothing added, nothing nagging.
  • No tracking inside the tools.
    We use a cookieless page-view counter at the site level, nothing more. No pixels, no third-party scripts watching your files.
§02 · Privacy

Privacy, stated plainly.

This site is a static bundle of HTML, CSS and JavaScript served from a CDN. There is no application server, no database, no file-upload endpoint. When you drag a photo onto a tool, the bytes move from your filesystem into your browser's memory. They don't go further.

The HEIC → JPG tool uses libheif (via heic2any), compiled to WebAssembly and bundled into the page. It runs inside your browser's sandbox. We cannot read what happens there, and neither can anyone else.

We don't set cookies. We don't use localStorage. We don't run third-party scripts inside the tools. The only outbound traffic is the single lightweight beacon from Cloudflare Web Analytics, which records anonymous page views and no personal data.

To earn the site its keep, we plan to serve a small number of contextual ads around the tools. Ads render in their own frames — they don't and can't see the photo you're working on. If the trade-off isn't to your taste, uBlock is a perfectly reasonable response.

§02 · Procedure

How the site works.

Three steps. None of them involve a server.

  1. Step 01 1

    You open a page.

    Your browser loads a static bundle of HTML, CSS and JavaScript from a CDN. That's the whole site.

  2. Step 02 2

    You drop a photo.

    The tool loads it into memory inside this tab. No upload, no queue — there is no tool endpoint to hit.

  3. Step 03 3

    You download the result.

    The converted file is generated locally and saved through your browser. Close the tab and every trace vanishes.

§04 · FAQ

About · FAQ.

Short answers. Anything missing? Tell us.

How can I verify you're not uploading?

Two ways. (1) Open your browser's DevTools and switch to the Network tab. Use any of the tools. You'll see the page load, the tool's code chunks load, and then — silence. No file uploads, no POSTs to an API, no background pings. (2) Read the source directly at github.com/NickPax/donttouchmypic — every line of the tool logic is public.

Do you use cookies or localStorage?

No cookies. No localStorage writes from our tools. We don't need either to run, so we don't use them. No cookie banner required.

Do you track analytics?

Cloudflare Web Analytics — cookieless, aggregated, no personal data. It counts page visits so we know whether the site is worth maintaining. We do not load Google Analytics, Facebook pixel, or any other third-party tracker.

Why does the site have ads?

Tools like these aren't free to build and maintain. A small number of contextual ads keeps the lights on without a paywall. Ads never see your photos — they render in isolated frames, scoped to the page layout, not to the tool.

Is there a sister site?

Yes — DontTouchMyDoc does the same thing for PDFs. Same principle: nothing uploads, ever.