Image Cutout › Privacy
Privacy policy
Last reviewed 2026-09-15.
Image Cutout does not upload your photos. The whole pipeline — reading the file, running the Segment Anything model, building the mask and writing the PNG or JPG — happens inside your browser tab, on your own device. There is no upload endpoint, no account and no server-side copy of your image.
What the app sends over the network
- Its own static files from
image-cutout.skillsafe.ai: HTML, CSS, JavaScript, the WebAssembly runtime and the demo photos. - Model weight files from
models.skillsafe.ai, SkillSafe's shared model registry, the first time you use a model. They are cached by your browser afterwards. The request contains no information about your photo.
That is the complete list. The page's Content-Security-Policy, set by the hosting platform, blocks every other connection, so the app cannot send your image anywhere even if it tried.
What the app stores on your device
cc-lang— your chosen interface language.cc-model— which of the two models you last selected.
Both live in your browser's local storage, never leave the device, and can be cleared with your normal browser controls. Your photos and cutouts are held only in memory and disappear when you close or reload the tab; downloads go straight to your own disk.
Analytics and cookies
The application's own bundle contains no analytics, advertising or tracking code, and the application sets no cookies. Three things outside the application do apply, and you should know about them, because they are visible in your browser's network panel:
- Hosting logs. The SkillSafe platform records standard web-server request data (such as IP address, timestamp, requested path and user agent) for delivery, security and abuse prevention.
- Bot protection. The site is served through Cloudflare, which injects its own bot-management script and may set related cookies. This is a property of the hosting layer, not of the cutout tool.
- Cloudflare Web Analytics. The same hosting layer injects
static.cloudflareinsights.com/beacon.min.jsinto every page on this site, including this one. It reports page-level traffic (URL, referrer, browser, country, timings) to Cloudflare. It is privacy-focused — Cloudflare states it does not fingerprint visitors — but it is analytics, it is injected by the platform rather than by this tool, and it cannot be removed from the bundle. It never sees your photo: your image is never uploaded to anywhere, and the beacon only measures page loads.
Children and sensitive images
Because nothing is uploaded, images you open are never seen by us or by any third party. You remain responsible for having the right to use the photos you open.
Contact
Questions or corrections: gptsci.media@gmail.com. Changes to the tool are recorded in the change log.
FAQ
Are my photos uploaded?
No. Every step runs in your browser on your device. There is no upload endpoint and the page's Content-Security-Policy blocks any other connection.
Does Image Cutout use cookies?
The application sets no cookies and its bundle contains no analytics code. The hosting platform serves the site through Cloudflare, whose bot-protection layer may set cookies and which injects a Cloudflare Web Analytics beacon that measures page loads. Neither ever sees your photo, because your photo is never uploaded.
What is stored in my browser?
Only your interface language and your model choice, in local storage. Photos and cutouts stay in memory and are gone when you close the tab.