Certificate Maker

🔒 Your photo never leaves this device

Everything happens inside your browser. Nothing is sent to a server, to an AI, or anywhere else. This is not a promise not to send it — it is built so it cannot be sent.

• Sending is blocked at the browser level — The page ships a connect-src 'self' content security policy, so the browser itself refuses outbound requests. There is no API here that could receive a photo either.
• You can check it yourself — Open the network tab and use the whole app — not a single external request appears. Once you have opened it, it keeps working in airplane mode.
• Face and bowl detection run locally too — The crop is adjusted automatically so the text and badge do not cover anyone's face or the bowl. That detection also runs inside this browser; the models (0.46MB for faces, 18MB for bowls) are served from this site, and your photo goes nowhere.
• Location data is dropped — EXIF metadata (where and on what device the photo was taken) is discarded on import and is not present in the exported image.
• Saved copies stay on the device — Certificates pinned to “Your wall” are stored only on this device (IndexedDB). Nothing is synced or backed up. The button below erases all of them.
• No analytics — No cookies, no tracking of any kind.