Every version, including the parts that were wrong.

WebP support, and the metadata writers now have exiftool checking them.

• addedWebP files can carry the XMP packet. Simple VP8 and VP8L files get promoted to the extended VP8X format automatically, which is the only form where WebP is allowed to hold metadata at all.
• addedA test suite that runs exiftool over the output and asserts DigitalSourceType, the caption and the credit read back correctly from all three formats. Writing bytes and trusting your own parser to read them is how you ship a file nobody else can open.
• changedJPEGs without a visible label are no longer re-encoded. The metadata is spliced into the existing file, so a 4000px print master keeps its original quality rather than losing a generation to a needless round trip.
• fixedIPTC fields longer than their IIM octet limit were being cut mid-character, which produced a replacement glyph in any caption containing an accent. They now trim on a UTF-8 boundary.

Transparency pages, and an honest answer about C2PA.

• addedHosted transparency pages at /transparency/your-slug, listing the images you choose to publish and the tools behind them.
• addedC2PA Content Credentials signing on paid plans, using c2pa-node.
• changedC2PA now fails soft. If the certificate is missing or the native module will not load, the file still gets its IPTC and XMP marking and the interface says why the manifest is absent. Silently returning an unsigned file that the user believes is signed is worse than not offering the feature.

Platform-specific text, after watching people paste the generic statement into Etsy and get delisted anyway.

• addedDisclosure text generated per platform for Etsy, Shopify, Meta, eBay and print, alongside the generic EU statement.
• addedThe manual steps each platform needs that no tool can do for you, listed under the copy blocks. Etsy's "Designed by" attribute is the usual one people miss.
• changedThe source-type picker became a radio list with real explanations. As a select menu, almost everyone chose "fully AI-generated" for images that were composites, which is a less accurate disclosure than the one they were entitled to make.

First working version. One image in, one marked image out.

• addedIPTC DigitalSourceType and XMP marking for JPEG and PNG.
• addedOptional visible corner label, composited with sharp.
• addedMagic-link sign-in and the free tier at three images a month.