Sepia 0.6.2

• On Android, a photo's location showed as "0.00000, 0.00000" because the system zeroes GPS for apps with no permissions. Sepia now says the coordinates were hidden from it and that the original file still has them.

Verify what you install

sha256 sepia-0.6.2.apk  2c48b62e2ef71807c5ea232f6a219969554c3aea7597f5742c76c7f6bd29a64f
signing cert sha256  ad9d5b2504baf0fc2e888f6bd08cd7a63a5342071b6d358b7d64d6a75d503a44

sepia.apk is the same file as sepia-0.6.2.apk under a stable name.

Sepia 0.6.1

Shrinks the release build with R8, with an explicit keep rule for the JavaScript bridge so the WebView can still call into it.

• Turned on R8 code shrinking for release builds. The bridge class that the WebView calls into is kept by name through an explicit proguard rule, so shrinking the rest of the app does not break anything.

Verify what you install

sha256 sepia-0.6.1.apk  475f1ea1c022b3a3811faac0e0b41389bfa29983719cb1cb71a75a3fb7576e96
signing cert sha256  ad9d5b2504baf0fc2e888f6bd08cd7a63a5342071b6d358b7d64d6a75d503a44

sepia.apk is the same file as sepia-0.6.1.apk under a stable name.

0.6.0

Fixes to the proof, the X-ray and the Android app.

• PNG exports in Firefox always ended on "Something survived". Firefox adds a small deBG chunk to PNGs a page encodes. It holds a value tied to the browser profile. Sepia now drops chunks like that from its PNG output before the check. The saved file is the one that was checked.
• Picking several images in the Android app's picker opened nothing. They all land in the batch screen now.
• On Android 9, Save all wrote one file and left the rest empty. Each file now gets its own save picker in turn.
• The X-ray names more fields that point at a person or a place: the Exif photographer, image editor and title fields, the computer an image was made on, document and page names, and GPS destination coordinates. An unnamed field holding text gets its own line instead of a quiet count. So does any unnamed GPS field.
• Broken or fake Exif, color profile and marker blocks in an original no longer read as clean.
• The X-ray and the proof screen are fully in Spanish, values included.
• Transparent WebP images stay transparent: they export as PNG instead of JPEG with a black background.
• Add box in the toolbar puts a cover box on the image. Buttons under the image move it, resize it and remove it. Covering something no longer needs a drag or a keyboard.
• The web app works offline from a subpath like example.com/sepia/ too.
• Release notes carry the APK's sha256 and the signing certificate digest again.

Verify what you install

sha256 sepia-0.6.0.apk  fab5a415503444bb1ad96b45767c7c15098f3e6d2397de478db250cbec0bf176
signing cert sha256  ad9d5b2504baf0fc2e888f6bd08cd7a63a5342071b6d358b7d64d6a75d503a44

sepia.apk is the same file as sepia-0.6.0.apk under a stable name.

0.5.1

A new icon.

Sepia's paper card was hard to tell from Magpie's and Blot's on a home screen. The icon is now a sun over a hill, with the right side of the picture breaking up into pixels. Nothing else changed.

0.5.0

Sepia runs on Android 9.

Sepia installs on Android 9 now. Saving there goes through the system save picker, because Android 9 has no way to add a photo to the gallery without a storage permission, and Sepia doesn't ask for one. The first time it opens on Android 9, it says once that Google's last security fixes for Android 9 came out in January 2022.

Sepia runs inside Android System WebView and needs version 108 or newer. With an older one, it now says which version it needs and which one the phone has, instead of opening to a blank page.

Opening an image no longer crashes the app on Google's AOSP WebView build, the one on emulator images and some AOSP-based phones. That build crashes whenever a page looks for QR codes, so code finding is off there.

0.4.3

Sepia stays clear of the status bar and the camera cutout.

On Android 15 and later, Sepia drew under the status bar, the camera cutout and the navigation bar, so the top of the app sat behind the clock and the battery. Catalyze4 saw it on a Pixel Fold's outer screen (#6). The whole app now sits between the bars, in portrait and in landscape. Nothing else changed.

0.4.2

Sepia says who made it.

A "Made by Munzzyy" credit now sits next to the About link, in the app and on the web. Nothing about how images are checked or scrubbed changed.

Sepia is GPL-3.0-or-later from this release on. 0.4.1 and earlier stay MIT.

0.4.1

The picker opens now.

Choosing an image to scrub did nothing: the button opened no file picker at all. The WebView had never been handed a file-chooser, so the image input was dead. It opens now, filtered to images, and the photo loads straight into the editor.

0.4.0

Two things the X-ray missed.

• GPS free-text fields, GPS area information and GPS processing method, were
  skipped before the report ever decided what to name, so they never showed
  up no matter what they held. Anything else the tag table didn't recognize,
  MakerNote, Windows Explorer's XP author and title fields, fell into one
  quiet low-severity line instead of being called out by name, which meant a
  file carrying your actual name in one of those fields could still come
  back clean. An earlier pass already counted oversized MakerNotes as
  truncated bytes, but that bucket never named them, so the clean verdict
  held anyway. All of it is named and severity-checked now, cross-checked
  against exiftool.

0.3.0

The batch round.

• Batch scrub: queue several images, triage them in one view, and scrub
  everything metadata-only in one pass. Every file runs the same bake,
  encode, and re-verify path a hand edit uses, every verdict is fail-closed
  on its own, and the rollup proof re-checks each exported file outside
  the app.
• The proof screen develops like a darkroom print, the risk pill reads as
  the verdict, the dropzone answers your hand, X-ray rows sweep in, and
  Copy image puts the clean file on the clipboard or says plainly that it
  could not.

Verify what you install

sha256 sepia-0.3.0.apk  1b5becf44b317a45c5722ebf90343152c6ea497e9b2927b05ba055036d8789ba
sha256 sepia-0.3.0.aab  2a2448867e5f430fd2385b4fdc4ba8dc361a449f78fb765b839ca60886010bee
signing cert sha256  ad9d5b2504baf0fc2e888f6bd08cd7a63a5342071b6d358b7d64d6a75d503a44

sepia.apk is the same file as sepia-0.3.0.apk under a stable name.