Faces found on your device
Face detection runs locally in your browser. Your original photo is never uploaded in the clear — every face is found, encrypted, and blurred before it leaves your device.

Faces found on your device
Face detection runs locally in your browser. Your original photo is never uploaded in the clear — every face is found, encrypted, and blurred before it leaves your device.
Tag who's who
Tag people already on BrightBlur, or start a profile for someone who isn’t. Tag a face once and the decision carries across every photo in the batch.
You set the audience
Choose which circles can see the photo, add a caption, and publish. Anyone outside your audience — and any face you didn’t tag — only ever sees a blur.
The publish screen previews your photo exactly as someone without face access will see it — every untagged or unshared face reduced to a mosaic. Nothing leaves your device until you’re happy with it.

End-to-end, per face
Each face gets its own encryption key, shared only with the people who should have it. There’s no master key and no back door — not even we can lift the blur.
Private by default
Every face starts blurred. Visibility is something you grant, never something you have to remember to revoke.
Password or passkey
Sign in with email and a password, or set up a passkey for passwordless, phishing-resistant login — your choice.
The same shared photo looks different to everyone who opens it. Faces are composited in each viewer’s browser from slices only they can decrypt, so people see exactly the faces they’ve been granted — and nothing more. If there’s someone you’d like to see, you can ask, and the person in control decides.

Start with the Overview to see how BrightBlur works end to end, or jump straight to Getting Started to set up your account.