Free Stock Photos and Icons: Reading the Licence Before You Ship

Every designer has a story about an image that turned out to be licensed. Usually it ends with a bill for more than the project earned, and always it starts with the phrase "it was free on a stock site."

The confusion is not carelessness. It is that "free" in this context can mean at least five different things, and the differences are buried in a page nobody reads.

The five permissions that get conflated

That last one causes the most expensive mistakes. "Royalty-free" is a pricing model, not a price. It means you buy a licence once and can use the image repeatedly without paying again. The image still costs money.

Photos: the licences you will actually meet

Public domain / CC0. No conditions. You can use it commercially, modify it, and you do not need to credit anyone. This is the only category where you can genuinely stop thinking about it. Sources tend to be older archives and government collections, which is why the imagery is often dated.

Site-specific free licences. Several large photo sites publish their own licence rather than using Creative Commons. The typical terms: free for commercial and non-commercial use, no attribution required, but you may not sell unmodified copies, and you may not redistribute them as a competing stock library. That last clause is the one that matters — using a photo on a product page is fine; bundling fifty of them into a template you sell is not.

CC BY. Free for commercial use, but you must credit the photographer in a specified way. The requirement is not "somewhere on the site" — it is usually a visible credit near the image or in a credits page. Getting this wrong is the single most common licence breach in small projects, because it is invisible until someone checks.

CC BY-SA. Same as above, plus a share-alike condition: derivative works must carry the same licence. This is fine for a blog post and a serious problem for a brand asset, because it can be read as obliging you to license the derivative openly.

CC BY-NC. Non-commercial only. A portfolio site for a business is commercial. A blog with advertising is commercial. This distinction catches people constantly.

Editorial use only. The image may be used in a news or commentary context, not in advertising or on a product page. Press photos and celebrity images usually fall here.

If you cannot find the licence in under a minute on the page where you got the image, assume you do not have one. That assumption will occasionally cost you a better photo. It will never cost you a legal bill.

Icons: generally simpler, with two traps

Icon sets are usually released under permissive licences, because the economics are different — nobody is licensing a single icon for a campaign.

The common ones: MIT and ISC require only that you keep the copyright notice in your distribution. Apache 2.0 adds a patent grant and requires a notice file. CC BY 4.0 requires attribution, which for icons usually means a line in your credits.

Two traps worth knowing:

Mixed collections. Aggregators that bundle hundreds of icon sets often carry a different licence per set. Installing a package does not mean every icon in it shares one licence. If you are shipping commercially, check the specific set, not the aggregator.

Brand and logo icons. A GitHub or Figma logo inside an icon set is not covered by the icon set's licence — it is a trademark, governed by the brand's own usage guidelines. Using it to indicate "works with X" is usually fine. Using it in your own logo, or in a way that implies endorsement, is not.

A workflow that prevents the problem

Licence mistakes are an information management failure, not a judgement failure. The fix is to record the licence at the moment of download, when you still have the page open.

Three habits:

1. Save the licence text with the file. A .txt next to the image, or a column in your asset tracker. Filename, source URL, licence name, attribution string, date. Thirty seconds per asset.
2. Keep a credits page from day one, even if it is empty. When you use a CC BY image, the credit has somewhere to go, and you never have to reconstruct it later.
3. Prefer no-attribution licences for anything permanent. A credit requirement is a permanent obligation attached to a specific page. If the page is rebuilt, the credit disappears and the licence is breached. For long-lived marketing assets, the simpler licence is worth a worse photo.

When to just pay

There is a point where the time spent auditing licences exceeds the cost of a subscription. If you ship visual content every week, a paid library with a clear commercial licence removes an entire category of risk and gives you better images.

The honest threshold: if you are spending more than an hour a month checking licences, buy the subscription. If you ship a handful of images a quarter, the free libraries plus the three habits above are genuinely sufficient.

The short version

• "Royalty-free" means "paid once," not "free."
• Non-commercial licences do not cover a business site with ads.
• Attribution requirements are permanent obligations attached to specific pages.
• Aggregated icon sets can mix licences — check the set, not the bundle.
• Log the licence when you download, not when you need it.

None of this is complicated. It is just a step that gets skipped under deadline, and the cost of skipping it arrives years later with a legal letter attached.