Privacy

On this device

Designing a seal, turning a photo into relief, previewing, and downloading a PNG or GLB all run in the browser. Those steps do not upload the design or the photo.

A PNG can be 1024, 2048, or 3072 pixels, with an optional transparent background. Downloads are not watermarked.

The studio saves a draft in this browser’s local storage so the last design can reopen. The draft can include your text and an image you uploaded. Saving the draft does not send it to the server. You can also download a design file and import it yourself.

If you choose Take to canvas, the rendered seal is kept in this tab’s session storage so the canvas page can show it. It stays there until that session storage is cleared. It is uploaded only when you stamp.

Language

The language switcher saves your choice in a cookie named wax-seal-language and in local storage under the same name. The cookie lasts one year, applies to this site only, and uses SameSite=Lax. It is used to open the same language on a later visit. It is not an advertising cookie.

If you have not used the switcher, the site reads the Accept-Language header your browser already sends, and does not store that choice.

Shared canvas

The shared canvas is a public grid. The once-a-day limit is remembered in this browser’s local storage: one stamp per browser per local day. It is not an account. While a stamp is still being sent, that local entry can include the seal image so a failed request can be retried. After a successful stamp, the entry keeps the day and the cell.

Stamping writes to a PostgreSQL database: the cell coordinates, a style code, a random id created in the browser for that attempt, the time, and, if you brought a seal from the studio, the rendered image. The image is stored as a small WebP and, when the upload is large enough, a 512-pixel WebP, plus a SHA-256 hash so an identical image can be kept once.

The database does not store your name, email, or the language cookie. The stored picture is the rendered seal, not the original photo file. If you made the seal from a portrait, people can see that relief.

Anyone can view the canvas and open a coordinate link. There is no sign-in and no delete button. A stamp stays on the public canvas until it is removed from the database.

Analytics

The site code does not add an analytics or advertising script, and it does not set an analytics cookie. Canvas images are not sent to an advertising network.

Serving a page still means the host receives ordinary connection data for the request, such as an IP address and a user agent. The application does not write that data into the PostgreSQL database used for the canvas.