Watermarker

No upload. There is no upload endpoint. The server cannot receive a file even if something went wrong, because nothing is ever sent to it.

No storage. The container runs a read-only static web server with access logging switched off. It stores nothing, not even your IP address.

No third parties. Every script and font is served from this origin. A Content-Security-Policy forbids the page from contacting any other host, so the page could not leak your file even if its code were tampered with.

Metadata is dropped. Re-encoding removes EXIF from photos — including the GPS coordinates of where the ID was photographed — and clears the author and producer fields from PDFs.

Works offline. Disconnect from the network and reload: it still works. That is the easiest way to verify all of the above for yourself.

How it works

Choosing a watermark that actually protects you