Privacy Policy
Last updated: September 10, 2026
This policy explains how Layout handles information when you use this website and its browser-based image tools.
Images and text you edit
Images, logos, names, quotes, and other content you add to an editor are processed locally in your browser. They are not uploaded to our servers. Export files are also generated on your device.
Editor content is not stored on Layout servers. To restore recent work, the editor may save state and processed working-image copies in storage belonging to this browser and device.
Website requests and Cloudflare
Layout is hosted using Cloudflare. When your browser requests a page or site asset, Cloudflare may process technical data needed to deliver and protect the service, such as your IP address, request time, requested URL, browser headers, and security or network diagnostics. Cloudflare handles that data under its own privacy terms and retention practices.
Local storage, analytics, and advertising
Layout uses PostHog Cloud EU to measure page visits and a small set of product milestones, such as opening an editor, selecting a template, and starting, completing, or failing an export. This helps us understand which tools are useful and whether the product works reliably. Analytics events may include the tool, template, export options, a fixed error category, device and browser category, page path, referring domain, and standard UTM campaign values.
PostHog runs in cookieless mode with person profiles, automatic click capture, session replay, heatmaps, surveys, feature flags, and automatic error capture disabled. Layout does not set an analytics cookie or analytics identifier in local or session storage. PostHog uses a daily-changing, server-side privacy hash for same-day aggregate counts. Analytics events do not include your editor text, images, filenames, full query strings, URL fragments, raw error messages, or a stable account or device identifier. Analytics data is sent to PostHog's EU service in Frankfurt.
This deployment does not currently display advertising. The advertising integration remains disabled until the AdSense account, consent flow, and staging checks are complete.
When advertising is enabled, Google and its advertising partners may process information such as cookies or local storage, IP address, device and browser information, page visits, and ad interactions to serve personalized or non-personalized advertising. A Google-certified TCF consent management platform must collect the required choice for visitors in the EEA, United Kingdom, and Switzerland before personalized advertising is loaded. Depending on that choice, the site may show non-personalized advertising or no advertising. You can manage choices through the consent controls shown on the site, your browser settings, and Google's advertising settings.
Editor images, text, filenames, drafts, and exported file contents are not sent to Google, advertising partners, or PostHog. Analytics stays cookieless and continues to use the allowlisted product events described above.
If a site-code update fails to load, Layout may briefly keep the current page path in session storage to prevent repeated automatic reloads. This technical marker contains no editor content and is removed after a stable load or when the browser session ends.
If you contact us by email, we receive the address, message, and any attachments you choose to send. We use that information to respond to you and address the subject of your message. Email is handled by the relevant email providers.
Future changes
Layout may add accounts, paid features, or advertising in the future. Before adding a feature that materially changes data handling, we will update this policy and any consent or control mechanisms that are required.
Your questions
For privacy questions, email layout@omrylo.com.