Legal

Privacy Policy

Last updated: November 1, 2026

The short version

Wallpapers are rendered in your browser, and the photo tools process selected images in the page without uploading them. Wallpaper recipes can appear in page addresses, which the host may receive as described below. There are no accounts, no cookies and no analytics beacon on this domain.

Wallpapers you make

The maker, the pair maker and the gallery compute every gradient inside your tab. The site is static files with no backend, so there is no server that renders, queues or stores a wallpaper. The PNG you download goes from your tab's canvas to your downloads folder without touching the network. The simplest way to check this is to load a tool, switch your wifi off and keep working.

Photos you check

The depth-effect checker and the icon tint matcher accept a photo through your browser's file picker and read it into a canvas on the page. The page code does not upload the selected photo. If you choose the tint matcher's maker link, its address contains colors extracted from the photo and a seed derived from them; the host may receive that address when the maker is requested. The photo itself is not in the link. The site's Content-Security-Policy restricts script-initiated connections to this origin; other browser behavior and extensions are outside that guarantee.

What a shared link carries

A wallpaper's recipe can appear in the page address as query parameters: its seed, palette, device (or custom width and height), point count and custom palette colors. The pair maker also puts its mode and both devices there. The tools update these addresses as you use them. Opening or reloading a shared link can send its URL to the host; a same-origin request may also carry the page address in its Referer header. Links can contain other information too, so check the address before sharing it.

Browser storage and history

The tools do not use cookies, localStorage, sessionStorage, IndexedDB or a service worker cache. The current recipe lives in the page URL and tab memory. Closing the tab ends the page state, but the address can remain in browser history or a shared link. The only caching is your browser's ordinary page cache, which is on your device, under your control, and clearable through your browser settings.

No analytics

This site runs no analytics. An analytics beacon is a script that reports where you are and what page you are on, and we don't want one running next to a canvas that holds your photo. The connect-src 'self' policy restricts script-initiated connections to this origin; it does not block ordinary navigation to other sites. We accept not knowing how many people visit.

Hosting and server logs

The site is served by Cloudflare Pages. Like any web host, Cloudflare processes standard technical data (IP address, user agent, requested URL) to deliver pages and protect against abuse, subject to Cloudflare's privacy policy. Opening or reloading a recipe link can send its URL to the host. A same-origin request may also carry the current page address, including its query, in a Referer header. A URL can contain arbitrary other information, so avoid putting sensitive information in it or sharing it unintentionally.

Advertising

The site shows no advertising. The two photo pages, the depth-effect checker and the icon tint matcher, have no ad slots, because a third-party ad script on those pages could read the photo on the canvas.

Email

If you email hello@depthpaper.com, we use your address only to reply, and we don't add you to any list. Please don't email photos: the tools process them locally and do not need them to be sent. Contact lists what to include in a useful report.

Children

This site is a general-audience utility. The hosting practices described above apply regardless of age.

Changes and contact

The date at the top shows when this policy last changed. Privacy questions: hello@depthpaper.com.