Your photo stays on your device
There is no server. Your photo is never uploaded. Everything happens inside your browser, on your phone or computer.
What happens to your photo
- You take or pick a photo. Your browser reads it. Nothing is sent.
- Hidden data is removed. Photos can carry your location, camera and date. We redraw the picture, which throws that away.
- Your face is found on your device. Two small models (MediaPipe, by Google) find your eyes, mouth and jawline, and which pixels are you. They run in your browser and are served from this website, not from Google.
- Your head is cut out. The background and your neck are removed. You can turn this off.
- Only a small square is saved: 256 × 256 pixels of your head, plus where your eyes and mouth are. The full photo is thrown away.
- Pixel art is made from that square every time you play.
What is saved, and where
| What | Where |
|---|---|
| Your 256 × 256 head picture and feature positions | This browser only (IndexedDB) |
| Your character choices (look, hat, outfit) | This browser only (IndexedDB) |
| Scores and settings | This browser only (localStorage) |
To delete everything: open the game, go to Settings, press Delete my data. Picking a ready-made character also deletes your saved head.
Sharing is your choice
"Save picture" and "Share" make an image on your device and hand it to your downloads or your phone's share menu. The game itself never sends it anywhere.
How we make sure
- The website is only static files. There is no backend to send a photo to.
-
A browser security rule (
connect-src 'self') blocks any connection to other websites, even by mistake. - Automatic tests fail if the page ever talks to another website.
- No ads, no cookies, no accounts.
Anonymous play stats
To see how the game is used, the site counts visits and a few game steps (for example "run started", "run finished: 250–499 m"). This is what is sent, and what is not:
- Never your photo, your face, your character, your name or anything you type.
- No cookies and nothing saved in your browser for stats. Visitors are counted with a code that changes every day, so you cannot be followed from day to day.
- Numbers are rough ranges, not exact scores. The tools are Vercel Web Analytics and PostHog (US servers). Both are reached through this website's own address.
- Turn it off any time: in the game, Settings → "Share anonymous play stats". It is also off when your browser sends "Do Not Track" or "Global Privacy Control".
Check it yourself
- Open the game and your browser's developer tools, then the Network tab.
- Take or upload a photo and play.
- Every request goes to this website. No picture goes anywhere else.
The code is open source. The photo pipeline is explained step by step, with links to the
code, in
docs/PRIVACY.md
on GitHub.
The character on the home page
That is the maker, Madhav – his own pixel character, shared with his consent. Only the pixel art is published, never his photo. Your character is never published anywhere.
Hosting
The host serves the website files and may keep normal server logs (such as IP address and pages visited). It never receives your photo.