Privacy policy
Tallypic is built to need as little of your data as possible. You can count without an account, and then nothing you count is stored. An account is only needed to keep results in your history. There are no advertising or analytics trackers. This page explains what we handle and why.
Your photos
When you count a photo, your browser first resizes it and saves it as a new JPEG. This drops the original file's metadata, such as the camera model and GPS location.
The resized photo is sent over an encrypted connection to our server, which passes it to a third-party image recognition service. That service finds the objects and returns their positions. We use the service only to count your photo.
Counting doesn't store your photo. A photo is kept only when you're signed in and press Save, as described below. Sample photos on the site use saved results and are never uploaded.
Camera
If you choose Take a photo, your browser asks for permission to use the camera. The live preview stays on your device; only the photo you take is counted, in the same way as an uploaded one.
Your account
You can sign in with Google, with a link we email you, or with an email address and password. We keep your email address, a display name (from Google, or the part of your email before the @), your Google profile picture address if you use Google, and your password only as a secure hash.
While you're signed in we keep a record of your sign-in session, including its IP address and browser, to keep the account secure. Sessions end when you sign out or after 30 days.
We send email only to sign you in, confirm your address or reset your password. There is no newsletter or marketing mail.
Saved results and history
When you press Save, we store the resized photo, a small thumbnail, the markers, the object type, the marker style, your note and the dates. Photos are kept in private storage and shown to you through links that expire after an hour; other people can't open them.
Everything is stored in the United States. You can delete any saved result from your history at any time, and it is removed right away. Deleting your account removes the account and every saved result and photo immediately; it can't be undone.
Downloaded and shared images
The marked-up image you download, copy or share is drawn in your browser and goes straight to your device or the app you choose. It isn't sent to us.
Free daily counts
To share free counts fairly, our server keeps a tally of how many counts were used each day: by account when you're signed in, otherwise by IP address. The tally holds only the date and the number, and tallies older than a week are deleted.
Like most websites, our hosting provider may keep standard access logs, such as IP address, browser type and the pages requested, for security and reliability.
Cookies and browser storage
When you sign in, Tallypic sets cookies that keep you signed in. They're needed for the account to work and aren't used for tracking. Without an account, no cookies are set.
Tallypic also stores a few preferences in your browser's local storage so the site remembers them on your next visit: theme, language choice, the object type you last counted, recently used types, marker styles and whether panels are collapsed. If you press Save before signing in, the result waits in your browser's storage until you're signed in, and is removed once it's saved or after a day. None of this is sent to us, and you can clear it at any time in your browser settings.
Service providers
We use a few providers to run Tallypic: Vercel hosts the site, Neon runs the database, Cloudflare R2 stores saved photos, Resend sends sign-in email, Google handles Google sign-in if you choose it, and an image recognition service counts photos. Each gets only what it needs for its part.
Changes and contact
If this policy changes, we'll update this page and the date above. Questions about privacy? Write to us at support@tallypic.com.