Privacy Policy
Last updated:
The short version: the tool runs in your browser, and the text and images you put into it stay there.
What do you collect?
Nothing you type. There is no account, and the text, numbers and images you put into the tool never reach a server.
- We do not ask you to create an account, and there is no login.
- The tweet text, display name, username, timestamp and engagement numbers you enter are never sent to a server. They exist only in the page you have open.
- Avatars you upload are read with the browser’s local file reader and converted in memory. The file is not uploaded anywhere.
- The finished PNG is generated in the page and handed straight to your browser as a download or a clipboard item. It does not pass through us.
What is stored on your device?
One thing: your current card, kept in your browser’s local storage so your work survives a reload.
The editor keeps your current card in your browser’s local storage so your work is still there when you come back. This never leaves your device, and it is not readable by us. Clearing your browser’s site data for this domain removes it. If storage is unavailable — private browsing, for example — the tool falls back to a sample card and simply does not save.
What does the server see?
Only the ordinary request for the page itself — never the content of your card, because that request does not carry it.
The site is static files served over HTTPS. Like effectively any web host, the server that delivers those files may record standard request information such as IP address, user agent and requested path, for the purpose of serving traffic and protecting against abuse. This is ordinary server operation, not analysis of your card content — the request that loads the page carries none of what you type.
Are there cookies, analytics or trackers?
One measurement tool: Google Analytics, which counts visits. No advertising, no tracking pixels, no social widgets — and it never sees what you type.
The site uses Google Analytics 4 to measure how many people arrive and which pages they land on. It sets its own cookies (the ones whose names begin with _ga) and reports aggregate information: the page being viewed, the referring link, an approximate region derived from your IP address, and your browser and device type. Google acts as our processor for that measurement; their handling is described in the Google Privacy Policy at https://policies.google.com/privacy.
What analytics does not receive is your card. The tweet text, display name, username, timestamp, engagement numbers and any avatar you upload are never part of what is reported, because they never leave the page to begin with.
If you would rather not be counted: block www.googletagmanager.com with an extension or your browser’s tracker blocking, or install Google’s official opt-out add-on. Nothing about the tool depends on analytics — it behaves identically either way.
Beyond that there is no advertising, there are no tracking pixels and there are no social media widgets. If you paste a remote image URL for the avatar, your browser will request that URL directly from whichever host you named, exactly as it would for any image on any page; that host will see that request. That is the only outbound request the tool can cause with your data, and only if you ask for it.
Is this intended for children?
No. It is a general-purpose utility and is not directed at children.
This is a general-purpose utility and is not directed at children. We do not knowingly collect personal information from anyone, including children.
How will you know if this changes?
The updated date at the top of this page changes with the policy.
If this policy changes, the updated date at the top of this page changes with it.