Privacy Policy

1. The one-paragraph summary

Your images are processed locally in your browser and never uploaded. We have no server that receives image files, no database of user content and no accounts. The only personal data involved on this site comes from third-party analytics and advertising cookies, described below, which you can refuse.

2. Who we are

Image Tools Online ("we", "us") operates the website at imageconvertor.si. For any privacy question, contact support@imageconvertor.si.

3. Your images and files

Every tool on this site processes files entirely inside your web browser using the HTML canvas and File APIs. Specifically:

• Files you select are read into your device's memory. They are not transmitted to us or to any third party.
• We operate no upload endpoint, no image storage and no processing server. There is no copy of your file to retain, share, sell or be compelled to disclose.
• Processed results are handed back to you as a browser download, generated locally.
• When you close or reload the page, everything held in memory is discarded.
• Nothing is written to localStorage except your light/dark theme preference and your answer to the analytics cookie question.

You can confirm this: open your browser's developer tools, switch to the Network tab, and process an image. No request carrying your file will appear.

As a side effect of re-encoding, EXIF metadata (including GPS coordinates, camera model and timestamps) is removed from output files. This is generally desirable when publishing images online. If you need that metadata, keep your original file.

4. What we do collect

4.1 Analytics

Analytics is opt-in for every visitor, wherever you are. Google Analytics loads only after you choose "Accept" in the cookie banner. Until then, and if you choose "Reject", no request is made to Google Analytics and it sets no cookies. You can change your answer at any time with the "Cookie settings" link at the bottom of every page. Rejecting also deletes the Analytics cookies already set.

If you accept, we use Google Analytics 4 to understand which tools are used and where the site breaks. It records: pages viewed, approximate geographic region (country/city level, derived from a truncated IP address), device type, browser, referring site, and interaction events such as "a tool was opened", "processing completed", "a download was clicked".

Event parameters include things like file format, rough file size in kilobytes, pixel dimensions and processing duration. No image content, file name content, or any pixel data is ever sent. IP anonymisation is enabled, and Google Signals and advertising personalisation are switched off in our configuration.

4.2 Advertising

We display advertising through Google AdSense. Google and its partners may use cookies and similar technologies to serve and measure ads. Where consent is required by law, Google's own consent mechanisms apply, and non-personalised ads are served if you decline. You can review and change your ad settings at myadcenter.google.com and opt out of personalised advertising at aboutads.info/choices.

4.3 Hosting logs

Our hosting provider maintains standard server logs (IP address, timestamp, requested URL, user agent) for security and abuse prevention. These are ordinary web server logs. They contain no image data and are retained according to the provider's policy.

4.4 Email

If you email us, we hold your message and address for as long as needed to deal with it. We do not add you to any mailing list.

5. What we never collect

• Your images, or anything derived from their pixels
• File contents of any kind
• Names, addresses, phone numbers or payment details (there is nothing to pay for)
• Account credentials (there are no accounts)

6. Legal bases (UK/EU GDPR)

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, to object to processing, and to withdraw consent at any time. Under the CCPA/CPRA you may also request disclosure of data collected and opt out of "sharing" for cross-context behavioural advertising. Under India's DPDP Act 2023 you have comparable access, correction and erasure rights.

Because we do not maintain accounts or store user content, most requests concern the third-party cookies described above. To withdraw analytics consent, use the "Cookie settings" link at the bottom of any page. You can also clear cookies for this site, use your browser's tracking protection, or opt out through the Google links in section 4.2. For anything else, email support@imageconvertor.si.

8. Children

This site is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has provided personal data through an email to us, contact us and we will delete it.

9. International transfers

Google Analytics and Google AdSense are operated by Google LLC and process data in the United States and other countries, under the transfer mechanisms described in Google's own privacy documentation. Your image files are not involved, as they never leave your device.

10. Data retention

Analytics data is retained for the period configured in Google Analytics (14 months by default). Server logs follow our hosting provider's retention schedule. Email correspondence is kept as long as needed to resolve the matter. We retain no image data at any point, for any duration.

11. Security

The site is served over HTTPS with a Content Security Policy, X-Content-Type-Options: nosniff, X-Frame-Options: DENY, a restrictive Referrer-Policy and a Permissions-Policy that disables camera, microphone and geolocation access. Keeping processing on your device removes the largest category of risk entirely: a breach of image data we never hold is impossible.

12. Changes to this policy

Material changes will be reflected in the "last updated" date at the top of this page. Continuing to use the site after a change means you accept the revised policy.

13. Contact

Privacy questions and requests: support@imageconvertor.si. If you are in the EU or UK and are not satisfied with our response, you may lodge a complaint with your local supervisory authority.