Privacy Policy & Security Guarantee
Effective Date: January 1, 2026 • Last updated: October 2026
🛡️Executive Summary: Your Images Never Leave Your Computer
Image Compress and Convert operates entirely on a client-side execution paradigm. When you drop, select, compress, resize, or convert image files on this website, all computations take place directly in your device's web browser memory. We do not maintain an upload API, we do not receive your files, and we cannot inspect, analyze, retain, or share your data.
1. Technical Architecture & In-Browser Processing
When you select images to optimize, your browser utilizes native Web APIs (specifically URL.createObjectURL and HTMLCanvasElement) to load the image into your computer's local Random Access Memory (RAM).
The pixels are drawn to an in-memory 2D canvas context where compression algorithms and format encoders (JPEG, PNG, WebP) recalculate file weights. At no point is an HTTP POST request or socket connection established to transmit image bytes to our web servers. Once you close the browser tab or click 'Reset', all allocated object URLs are explicitly revoked and memory is reclaimed by your browser's garbage collector.
2. Independent Verification
We believe privacy should be verifiable, not merely promised. Any user or security auditor can easily verify our client-side guarantee:
- Open your browser Developer Tools (press F12 or right-click and select Inspect).
- Navigate to the Network tab.
- Drag and drop any number of photos into our Image Studio and click Process.
- Observe that zero upload network requests are initiated. You can even disconnect your Wi-Fi or internet connection after loading the page, and all compression and conversion features will continue to work completely offline.
3. Information We Collect (and Do Not Collect)
✓ What We Never Collect
- Your source or converted image files
- EXIF metadata, GPS locations, or camera serials
- Account passwords or financial information
- Personal biometric or facial recognition data
ℹ️ Minimal Telemetry Only
- Aggregated pageview counts (for server capacity planning)
- Browser user-agent string (to diagnose compatibility bugs)
- Dark/Light theme preferences (stored locally in localStorage)
4. Cookies and Local Storage
We do not use invasive cross-site tracking cookies. We utilize your browser's localStorage strictly to remember your preferred UI theme (Dark vs. Light mode) and selected language preferences so that your interface remains consistent across sessions.
5. Open-Source Client Libraries
To deliver specialized capabilities (such as Apple HEIC/HEIF decoding and client-side multi-file ZIP generation), we integrate well-vetted, open-source libraries including heic2any and jszip. These scripts execute exclusively inside your browser sandbox and contain no telemetry or external call-home functions.
6. GDPR & CCPA Compliance
Under the European General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), individuals hold fundamental rights regarding their personal information:
- Right to Know / Access: Because we collect zero personal records or user images, we maintain no database of user profiles.
- Right to Deletion: Your data is automatically deleted from your local device memory as soon as you close your browser tab.
- Do Not Sell My Personal Information: We do not sell, rent, or monetize personal user information.
7. Children's Online Privacy (COPPA)
Our website is safe and suitable for users of all ages. Because we do not collect personal identifying information or maintain accounts, we do not knowingly gather data from children under the age of 13 in compliance with COPPA.
8. Contact Our Data Protection Team
If you have questions, inquiries, or enterprise auditing requirements regarding our privacy architecture, please get in touch via our Contact Page or write directly to [email protected]. (Contact Page).