Privacy and security
Your images never leave Figma. Croppy only goes online to check Pro license keys.
Your images stay on your computer
Croppy crops, resizes and encodes every image inside the plugin window on your computer. Nothing is uploaded, including for:
- Smart focus, which uses the open-source smartcrop.js library,
- Face focus, which uses Google's BlazeFace model. The model is built into Croppy and runs locally,
- ZIP downloads, which are built in the plugin and saved by your browser.
Croppy has no analytics or tracking.
When Croppy goes online
Croppy's plugin settings in Figma allow it to contact only Dodo Payments, the store that sells Croppy Pro. It does so to:
- activate a license key when you paste it in,
- check the license when Croppy opens, at most once a day,
- remove the license when you choose Remove license from this device.
These requests send your license key and, when activating, your Figma account name. The name labels the activation so devices can be told apart. The Buy buttons open Dodo Payments' checkout in your browser.
What Croppy stores
| What | Where | Who can see it |
|---|---|---|
| Ticked sizes, custom sizes, left-out sources, crop settings and export settings | On each page of your Figma file | Anyone with access to the file |
| Trial runs used and your license key | Figma's plugin storage on your device | Only you, on that device |
Open-source software
Croppy is built with React, Tailwind CSS, fflate (ZIP files), smartcrop.js and TensorFlow.js with the BlazeFace model. Their license notices are included in the plugin.