foxglove

Under construction
For human eyes only
Images processed on this device: 0
+
Upload your art
Puts your copyright, and your name once you add it, inside each file you save.
Select several at once
PDFs open in the Docs tab instead, one at a time. Testing
Metadata: tracking out, record in
Always on
Location, serial numbers, hidden thumbnails and edit history are removed. Your name (‘Unknown’ in the creator fields if you leave it blank), your copyright line, your terms and a machine-readable “do not train” statement are written in, in the standard fields (XMP, EXIF and, for JPEG, IPTC). Platforms may still strip them. Foxglove makes no claim about what removing them means legally. Not legal advice.
Keep capture date and camera model
Keeps the capture date and camera make/model from the original file’s EXIF, when it has them (most PNGs from drawing apps do not). Location, serial numbers, thumbnails and MakerNotes are never kept.
Allow search engines to index
Off: the machine-readable field says no AI/ML training; the written terms also reserve text and data mining.
Written as the IPTC digital source type, the field Meta and Pinterest say they check for AI-generated markers. It records that a person made this; pick the right one, since “a digital creation” is written unless you change it. It does not reach a platform that strips XMP on upload.
Linked from the file as the place your terms live. Make one under “Do-not-train files for your website.”
Save as PNG
Lossless. Keeps transparency. The record goes into PNG text, EXIF and XMP.
Save as JPEG Testing
Usually smaller. Carries EXIF, XMP and the legacy IPTC fields; in IPTC’s 2019 test Facebook kept the IPTC/EXIF creator and copyright fields and removed XMP. Transparent areas turn white.
Any combination; at least one stays on. Every saved file carries the record and gets its own receipt.
A note in the file
Your own line, written into the file’s description fields with your name, where the Inspect tab or any metadata viewer shows it; it is not visible in the picture. If you leave it blank, ‘Not for AI training. All rights reserved.’ is written, or just your credit if your name is filled in. A platform that strips metadata drops it.
0/124
Add your name below to include it in the note.
rights reserved unauthorized licensing
Your signature Testing
Your name and handle are written into every file’s metadata fields. They stay with the file until a platform or converter strips metadata. Turn on a visible signature and your name is drawn into the picture itself, so it stays in any copy that keeps that part of the image. You can add a logo or signature image too, drag either one into place, and set its size and opacity.
Remembered on this device for next time; Foxglove doesn’t send it to any server. It’s written into every file you save (the note and the file metadata), and drawn into the picture if you turn on the visible signature below.
Stamp a visible signature
Hidden message: paused
The hidden message used Foxglove’s own format: only Foxglove could read it, and social media uploads might erase it. It’s switched off while a sturdier mark is planned: TrustMark, an open invisible watermark from Adobe (free and open source) that other programs can read. It isn’t in the app yet. What works now: your copyright, and your name once you add it, in every file you save, the visible signature, and receipts kept on this device. Pictures saved earlier with a hidden message can still be checked in the Inspect tab.
Limit Resolution
Scales the long side down to the size you choose (default 2048 px) when the image is larger.
2048px
On a site you control you can say what AI may do with it, in the places crawlers read. Pick what you want, pick where the site is hosted, and paste the files. Every line below is a request or a declaration, not a lock: only an edge rule such as Cloudflare’s bot blocking turns a crawler away.
What do you want?
Where is the site?
1 · robots.txt — at the site root

            
2 · Headers — the image header is the one signal the open-dataset downloader obeys

            
3 · Page tags — paste inside every page's <head>

            
          
4 · /.well-known/tdmrep.json — the W3C reservation file

            
5 · Policy page — the page the files point to (/ai-policy)

            
          
What this does not do
    Initializing...
    --
    Images
    --
    Pixels Processed
    --
    Note length (line + credit)
    Suggested caption for your post
    Inspect this file
    See the record a PNG export would carry. To check a file you saved, open it in the Inspect tab.
    Foxglove on iPhone
    The iPhone app is version 1.1.1 and doesn’t have the changes on this website. Home screen widget, saving to Photos, and batch processing. Free on the App Store.
    Download on the App Store
    Sign up for updates
    Foxglove updates and the occasional message from c.weird, the artist and developer of Foxglove. Your email goes to info@cweird.com through FormSubmit.
    Thanks!
    Hide made-up claims in a PDF Testing
    Docs hides made-up claims in a PDF's text and prints one of them on the last page. You keep an answer key, and the checker below looks for the claims in text you paste. It runs on your device: the text and PDFs you use aren't uploaded.
    Send ideas or suggestions
    If you find a bug, let me know and send a screenshot if you can!
    Your document
    The made-up claims Foxglove writes are in English, and the checker reads only a–z and numbers. Pasted text can use most Latin, Greek, Cyrillic, Armenian and Georgian letters; a PDF keeps its own text.
    A blank line starts a new paragraph; a single line break starts a new line. The PDF is US Letter in one font: your title at the top, then the text with no headings or bold. Most emoji are left out.
    Made-up claims
    Made-up claims, each built around an invented name. They're hidden in the PDF's text, and the first one is also printed in small grey type on the last page. Your answer key lists every claim.
    Edit any claim; keep each one on-topic and false. Up to 12 claims. Claims under 20 characters, or that Docs can’t print or check, are left out when you build, and Docs says which. The names under each claim are what the checker looks for; when you build, Foxglove picks them again from each claim's wording, so they can change. The answer key shows the ones it used.
    Copies & options
    Whole class: every copy has the same claims. Sections: each section's copy gets its own claims, so the checker can show which section's claims a submission repeats.
    Glyph scramble
    Copy-paste and text extraction get gibberish; the page looks normal. OCR and AI tools that read the page as an image read it fine.
    Hidden instruction
    Adds a hidden line, which you can edit, asking AI tools not to summarize the file. Copy-paste and text extraction pick it up; tools that read only the page image don't.
    Plain copy
    Also export a copy without the scramble, the hidden claims or the hidden instruction. It shows one made-up claim: from pasted text, as a line after the text (not wrapped, so a long claim is cut off at the page edge); from an uploaded PDF, in small type at the bottom of the last page.
    What this does and doesn't do
    • It changes what text extraction gets from the PDF and hides made-up claims in it. It doesn't damage any AI model or stop training.
    • AI tools that read the page as an image skip the scramble and the hidden claims. The one claim printed in small grey type on the last page is the only one they can see.
    • The PDF's text carries the hidden claims and, when they're on, the hidden instruction and the scrambled text. The plain copy leaves those out.
    • A match means the text contains a claim planted in this PDF. It can come from an AI tool or from someone copying the PDF's text, and unedited pack claims are the same in every PDF built from that pack. The answer key shows exactly what was planted.
    Check a submission
    Paste an essay or answer to check it for the claims you planted. Checking happens on your device. Answer keys are saved in this browser only, up to the 50 most recent, so check in the same browser you built the PDF in. The answer-key CSV is your copy; it can't be loaded back in.
    Inspect a file Testing
    See what a file carries: the record Foxglove wrote and any hidden message in the pixels, or whatever a platform left of them. The file you open stays on your device.
    Tap to choose an image
    What this file carries
    Your receiptsTesting

    Each picture you save or share from Foxglove adds its receipt here: file name, size, fingerprint, date, and what was written into it.

      Kept only in this browser on this device. Clearing this site’s data, or switching browser or device, means they aren’t there. Browsers can also delete site data on their own: when the device is low on space, and Safari after 7 days of Safari use without you interacting with this site. Download them to keep a copy (a JSON file and a CSV for spreadsheets).

      The dates come from this device’s clock. Emailing the downloaded file to yourself, or registering the work with a copyright office where your country has one, adds a date someone else keeps.

      Send feedback

      Foxglove is free

      Built by one artist and given away for free. If it’s useful to you, you can chip in to keep it that way.

      What is Foxglove?

      Foxglove rewrites your image on your device before you post it: it drops the source file’s location, serial numbers, hidden thumbnails and edit history (it keeps the capture date and camera model unless you turn that off), writes your name, copyright, terms and a machine-readable “do not train” statement into the new file, and can draw a visible text signature into the picture if you turn it on. All image processing runs on your device, and Foxglove never uploads your images; they leave your device only when you save, share or send them yourself, including screenshots you attach to feedback. On the website, the only things sent anywhere are the email address you type into the sign-up form and what you send with the feedback form (both go to info@cweird.com through FormSubmit), and Vercel Web Analytics counts page views, sign-ups and App Store button taps. The iPhone app hides the sign-up form and has no analytics.

      What Foxglove adds to your image

      Metadata: tracking out, record in — removes location, serial numbers, hidden thumbnails and edit history by re-encoding the image, then writes your name and handle (if you entered them; otherwise the creator and owner fields say ‘Unknown’), copyright, terms and a machine-readable “do not train” statement into the EXIF and XMP fields. If ‘Keep capture date and camera model’ is on (it is on by default), the capture date and camera make/model the source file already carries are copied into the new file; a file with no such data gets only the export date.

      Hidden message — paused: it used Foxglove’s own format, so only Foxglove could read it, and social media uploads might erase it. It’s switched off while a sturdier mark is planned (see “What is the hidden message?” below). Pictures saved earlier with a hidden message can still be checked in the Inspect tab.

      Visible signature Testing — turn it on and Foxglove draws a text caption into the image pixels: by default your name and handle if you entered them, the year, and ‘not for AI training’; you can type your own caption instead, and add a logo or signature image. Drag either one into place or pick a spot, and set its size and opacity. The size meter is a rule of thumb: text at least 22 px tall after an assumed downscale to a 768-px short side, at least 60% opacity. Visible by design; you choose how subtle, and where it sits.

      A note in the file — your own line, written into the file’s metadata with your name. Read it back in the Inspect tab.

      “Do not train” statement — the ‘do not train’ choice is written as the IPTC/PLUS Data Mining property in the file’s XMP metadata, a published standards-body vocabulary. Whether that meets EU copyright law’s machine-readable reservation is a legal question. Choose no AI training at all, or search indexing only. No AI company has published that it reads this field. Any re-save that does not copy metadata drops the record (the app’s own re-encode does; so did placing a signed PNG into a new canvas image, and a macOS sips PNG-to-JPEG conversion). In IPTC’s 2019 test Facebook removed XMP, where this statement is written, so it is most likely to stay on files you host yourself. Foxglove makes no claim about what removing these fields means legally. Not legal advice.

      Batch processing — up to 20 images at a time. If you add more, the first ones up to 20 are kept and the app says how many were left out. People have reported large batches on phones stopping before they finish.

      Does this actually “poison” AI models?

      No. Foxglove does not try to damage AI models, and nothing in it is computed against one. What it does: writes your name, rights and a “do not train” statement into the file’s metadata and, if you turn it on, draws a visible signature into the picture. The visible signature can be cropped out, and a re-save that does not copy metadata drops the record. The website no longer adds the faint noise pattern; the iPhone app (1.1.1) still adds it by default.

      "I uploaded to ChatGPT and it still described my image"

      That's expected. Nothing Foxglove writes into a file is meant to change what a chatbot says about the picture. Turn on the visible signature and your name is part of the pixels, so it goes wherever that part of the image goes. The record and the do-not-train statement are a rights record inside the file, with a receipt you keep; no AI company has published that it reads that field.

      What is the hidden message?

      It’s paused on the website. The hidden message used Foxglove’s own format: only Foxglove could read it, and social media uploads might erase it. It’s switched off while a sturdier mark is planned: TrustMark, an open invisible watermark from Adobe (free and open source) that other programs can read. It isn’t in the app yet. What works now: your copyright, and your name once you add it, in every file you save, the visible signature, and receipts kept on this device. Pictures saved earlier with a hidden message can still be checked in the Inspect tab. The iPhone app (1.1.1) still has its own hidden message.

      Does it survive if I convert the PNG to a JPEG?

      The record — name, copyright, terms and the “do not train” statement — is metadata inside the file. Whether a conversion to JPEG carries it over depends on the tool you use (the PNG chunks sit after the image data, where some tools such as macOS sips ignore them), so check the converted file in the Inspect tab. The visible signature, when turned on, is part of the picture, so converting the format keeps it; cropping or covering that area removes it. You can also have Foxglove save a JPEG directly (the format switches are in the Metadata card), with the legacy IPTC copyright fields that Facebook kept in IPTC’s last published test (Spring 2019); PNG, JPEG and, in the web version only, WebP can be saved together, each with the record and its own receipt.

      What's new

      Update — November 3, 2026 — A new look at the top, with the mascot (Mascot visits in About turns its visits off). Batches take up to 20 images. Clearer messages when a file can’t open or is too large to save, and less memory per picture. Docs checks PDFs when you pick them and names any claims it leaves out.

      1.2.0 (website) — November 2, 2026 — This is the website. The iPhone app on the App Store is still 1.1.1 and doesn’t have these changes.

      Testing Visible signature: your name, a caption of your own or a logo drawn into the picture — drag to place, pinch to size. Off by default.

      Testing Inspect tab, in place of Verify: shows what a file carries (creator, rights, terms, the do-not-train statement, dates, camera, any location or serial numbers), reads a hidden message from the pixels when a file carries one, and checks a file against your receipt.

      Testing JPEG and WebP copies next to the PNG (WebP on the website, in browsers that can make it), each with the record and its own receipt entry.

      Testing Do-not-train files for your website: robots.txt, host headers, page tags, tdmrep.json and a policy page to paste in.

      Testing Docs tab: makes a PDF from your text, or a copy of your PDF, with made-up claims hidden in it, plus a private answer key, and checks pasted text for those claims.

      Every saved file carries your name (or ‘Unknown’), a copyright line, your terms and a “do not train” statement (no AI training, or search indexing only), plus a human-made declaration, and you get a receipt with each file’s fingerprint.

      The hidden message is paused: it used Foxglove’s own format, which only Foxglove could read, and social media uploads might erase it. Pictures saved earlier with one can still be checked in the Inspect tab.

      The noise switch is gone: Foxglove no longer adds a noise pattern to the pixels. Previews show the whole picture instead of a square crop. A feedback form in About sends ideas, suggestions and bugs, with screenshots. PDFs picked in the main upload box open in the Docs tab. Testing Each picture you save or share now keeps its receipt on this device; the receipts are listed in the Inspect tab, with Download all. The wording describes what the app does; it no longer claims to damage AI models.

      1.1.1 (Build 8) — June 10, 2026; the version in the iPhone app. The hidden message is read back before the app reports it embedded: if the textured-only embed doesn’t fit or doesn’t read back, flatter areas are tried, and the results screen says when it couldn’t be embedded. A long message is trimmed to fit the 124 characters, cutting your own text before your artist credit.

      1.1 (Build 7) — PNG transparency kept in web downloads; the iPhone save path that keeps it was connected in 1.1.1 (Build 8). This release hid the message only in textured areas and added Max mode; 1.1.1 changed the first, and Max mode is not in this version.

      1.0 (Build 6) — Added the missing camera-permission text, without which opening the camera crashed the app. App Store subtitle changed.

      1.0 (Build 5) — Block-based hidden-message encoding and the PNG description metadata.

      See full changelog →

      Not in this version

      Content Credentials (C2PA) — Inspect shows when a file already carries a Content Credentials manifest; Foxglove can’t write or re-sign one.

      Android — there is no Android app; the work is paused until there is an Android test device.

      Get it on iPhone

      The iPhone app is version 1.1.1 and doesn’t have the changes on this website. It adds a home screen widget and haptic feedback, and saves your images to Photos.
      Download on the App Store

      Sign up for updates

      Foxglove updates and the occasional message from c.weird, the artist and developer of Foxglove. Your email goes to info@cweird.com through FormSubmit.
      Thanks!
      Mascot visits
      Now and then the mascot leaves the title to peek around the app. Turn this off to keep it behind the title. Reduce Motion on your device does the same.