Why we built a photo studio that fits in a browser tab, and the rules we set for ourselves about privacy, likeness and what we will not generate.