Privacy - what this site does today
Written 19 September 2026. This page is updated when the behaviour changes.
How your input, your favorites and your requests to the server are handled.
1. The text you type
Whatever you put in the text box, the symbol search field or the face builder is processed
inside the browser that opened this page. The JavaScript downloaded with the page does the conversion
on screen; no request leaves the page to do it. Nothing saves it either, so closing the tab or reloading clears it.
The address bar carries only the language (lang) and the current tool (tool) -
never your text and never your symbol search.
The copy button calls the browser's clipboard. What happens to the clipboard afterwards is up to your device and operating system (clipboard sync settings, for instance) and is outside GlyPop's control.
2. What is stored in this browser - favorites
Starring (☆) something stores only which item you picked in this browser: a fixed catalogue id for a style, a symbol, a Korean decoration or a multi-line kit layout, and for the nickname mixer the style + decoration pair. Your text is not stored. The previews inside the favorites box are rebuilt from whatever is in the input box at the time.
- It never leaves the browser; it is not sent to a server and not synced to another device.
- No account is needed. There is no sign-in at all.
- The Clear button empties only the list on the tab you pressed it on. Clearing your browser's site data removes all of them.
- Where storage is blocked (private windows and similar) nothing is stored, favorites work in that tab only, and the page says so.
- The code on this page neither sets nor reads cookies.
The All tools screen also shows a Recently opened row. That keeps the same kind of thing and nothing more:
which screens you opened, as tool ids, up to six of them, in this browser only, under the same rules as
favorites. What you typed on those screens is not kept. The two values this browser stores are the favorites
(glypop.favorites.v1) and the recent list (glypop.recent.v1), and the
Clear recent list button removes the second one.
3. The tool that takes a picture
Photo to dot art in the workshop turns a picture into characters. It does not upload your picture: the browser opens the file inside this tab, reads how bright each part of it is, and turns that into braille or block characters.
- The file is not sent to a server, not stored on your device or ours, and not synced anywhere.
- Moving the brightness slider has to read the picture again, so while this screen is open the picture is held in the tab's memory. Leaving the screen or reloading ends that, and «Let go of the picture» clears it on the spot.
- Only image types (PNG, JPEG, WebP, GIF, BMP) up to 8MB are read; anything else is refused before it is read. A file that turns out to be an enormous picture (over 8000 pixels on a side) is refused too, with a message.
- The art it produces is not stored either. Reloading or closing the tab leaves nothing behind.
4. What opening any website necessarily creates
To receive a page your browser has to send a request, and that request carries your IP address, the URL you asked for, the time, and whatever your browser attaches itself (User-Agent, Referer and so on). Those requests are received by the web server on the hosting infrastructure this site runs on (AWS).
5. Advertising and analytics
- There is no advertising script on this site right now. No ad slots, no ad units, no auto-ad code.
- There is no analytics or tracking script either. No visitor analytics tool has been added.
- There is an
ads.txtfile at the root of the site. That file is a plain text list naming the sellers authorised to sell this site's ad inventory; by itself it displays nothing and collects nothing from visitors. It is read by advertising systems, not by your browser. - If advertising is ever switched on, this page will be updated before that happens, naming what gets added - cookies, identifiers and how to change the settings.
6. Third parties
Every file the page needs - HTML, CSS, JavaScript, icons - is served from this site's own domain. No external fonts, scripts, widgets, social buttons, analytics or advertising scripts are loaded.
The site itself is hosted on AWS infrastructure, so the request that opens the page passes through it (see 4 above).
7. What does not happen
- No accounts and no sign-in; you are never asked for a name, an email address or a phone number.
- Your text is never stored on a server or shown to anyone else.
- GlyPop does not create or attach an identifier for recognising an individual.
- Information that is never collected is not sold or passed to third parties.