Privacy policy
Privacy policy
Last updated 7 September 2026. Operator: the Knockout project (Astrodevil).
Knockout offers background removal, social thumbnails and photo splitting in this browser tab. We do not operate an upload API for your photos. We cannot see the file, because it is not sent to us.
1. What this policy covers
This policy describes how the Knockout web app handles information when you use the studio and marketing pages. If you fork or self-host a copy, you are the operator of that copy.
2. Photos and cutouts
The image you pick, the cutout, any backdrop you add, stacked thumbnail images, slideshow slices and any thumbnail title you type are processed with canvas and an on-device model in your browser. Knockout does not receive those files or that text and cannot view them.
3. What the browser downloads
App files, fonts and examples load from the site host. When you first remove a background, the browser downloads model and runtime resources from staticimgly.com: about 56 MB or 100 MB of resource data, depending on the selected model. Compression and caching affect the transfer size. The resource manifest and SHA-256 checks are pinned in this build. These requests reveal normal connection information, such as your IP address, to the host and resource provider. They do not contain your photo.
4. Local storage on your device
Photo and draft recovery is off by default. With “Remember on this device” enabled, the latest original, cutout, pending photo, thumbnail draft and photo-splitter draft can be saved in this browser’s IndexedDB for up to 24 hours. Expired copies are deleted while the app is open, or on your next visit; a closed site cannot delete data on a timer. Turning recovery off deletes saved recovery copies. “Clear photos and drafts” also clears current work. The theme and recovery preference are stored locally. Model resources may remain in the browser cache; browser site-data controls can clear that cache.
5. Accounts, cookies, and analytics
There is no Knockout account or per-image credit system. On knockout.mranand.com, we use Raah analytics from t.raah.dev to understand visits, clicks, performance and errors. The beacon reports page URLs and titles, referrers and campaign parameters, click positions, scrolling and visit duration, browser/screen and connection information, resource timings, and error messages. The service also receives ordinary connection information such as your IP address. It does not intentionally send your image files or thumbnail text.
Raah stores visitor and visit identifiers in localStorage and sessionStorage and opens a live-presence connection. These identifiers are separate from optional photo recovery. “Clear photos and drafts” clears editing data; use your browser’s site-data controls to remove analytics identifiers. The beacon is disabled on localhost and other preview domains. The site host and model provider may also keep ordinary connection logs.
6. Children
The studio is a general-purpose image tool. Only process photos of children when you have the right to do so. We do not ask for children’s personal information. General visit analytics described above may still be collected when someone uses the public site.
7. Open-source license
Knockout is AGPL-3.0. Cutout inference uses IMG.LY background-removal (also AGPL) in the browser. Source is on GitHub so anyone who uses a hosted copy can read and rebuild it. Example stills on the landing page are licensed Unsplash photographs.
8. Contact
Project source: github.com/Astrodevil/Knockout. For privacy questions about this app, open an issue on that repository.