Privacy Policy
Last updated: August 13, 2026
The short version
Your images are never uploaded to us, so we never hold them, cannot see them and have nothing to sell or lose. What we do collect is limited to ordinary website analytics. We do not run advertising on this site. Everything below explains that in full, including the parts you have a legal right to know.
Who we are
ImgCruncher ("we", "us", "our") operates the website at https://imgcruncher.com. We are the data controller for the limited personal data described in this policy. For any privacy question, or to exercise a right listed below, use our contact page and write "Privacy" in the subject so it reaches the right person.
Your images are not part of this
The most important privacy fact about this site is that all image processing happens entirely in your browser. When you choose an image in any of our tools, that file is read and processed by code running on your own device, using standard browser features such as the FileReader API and the HTML5 Canvas API. Your images are never transmitted to our servers.
This is not a policy commitment that we could quietly change. It is how the software is built. We have no technical ability to access, view, store or recover your images, because they never leave the machine you are sitting at. You can verify this yourself by opening your browser's network tab while you use a tool, or by reading our image privacy page, which runs the check for you and reports what it finds.
This applies to every tool on the site, including the ones that read metadata. When the EXIF viewer shows the GPS coordinates embedded in a photo, that reading happens on your device and the result is not sent anywhere.
What we collect
Information you give us directly
If you send us a message through the contact page, we receive whatever you choose to put in it: typically a name, an email address so we can reply, and the content of your message. We ask you not to include sensitive personal information in a support message, because a support inbox is not the right place for it.
Information collected automatically
Like almost every website, our servers and analytics record standard technical information when you visit: IP address, browser type and version, operating system, referring page, the pages you view, and the date and time of the visit. This is used to understand which pages are useful and to detect abuse. It is not used to build a profile of you as an individual.
Information we never collect
- Your images, or any derivative of them such as a thumbnail or a hash
- The metadata inside your images, including GPS coordinates
- Account credentials, because there are no accounts
- Payment details, because nothing here is paid for
- Precise location data
Cookies and similar technologies
We set a small number of cookies ourselves. Our analytics provider sets its own, but only after you accept in the banner: until then its script is not loaded and no request is made to it. The full inventory, including names, purposes and lifetimes, is in the cookie policy. You can withdraw or change your consent at any time through the Cookie Settings link in the footer of any page, which reopens the banner and deletes the analytics cookies if you switch to declining. Your browser's own cookie controls work too.
Advertising and affiliate links
We do not display advertising. There are no ad networks on this site, no ad scripts, no ad cookies and no third party building an advertising profile from your visit here.
Some articles on our blog link to products and services we recommend. A few of those are affiliate links, which means that if you click one and later buy something, we may receive a commission from that company at no extra cost to you. This is how the site pays for itself instead of advertising. What it means for your data:
- Clicking an affiliate link sends you to the other company's website, and from that point their privacy policy applies rather than ours.
- That company will typically set a cookie in your browser so it can attribute a later purchase to us. We do not control that cookie and cannot read it.
- We never pass your personal information to an affiliate partner. They learn only that a visitor arrived from our site.
- We count how many times each recommendation is clicked, in aggregate, so we know which ones readers find useful. That count is not tied to you as an individual.
A commission never buys a recommendation. Our full position on this is in the affiliate disclosure and the editorial policy.
Analytics
We use Google Analytics to understand aggregate usage: which pages are visited, which tools are used, and roughly where visitors come from. It runs only if you accept in the cookie banner. If you decline, or never answer it, the Google Analytics script is never added to the page and Google receives nothing about your visit, so the opt-out below is not something you need. Google Analytics sets its own cookies and processes data according to Google's privacy policy. You can prevent it entirely with the Google Analytics opt-out browser add-on. We do not use analytics to identify individual visitors.
Why we are allowed to process this data
If you are in the UK or the European Economic Area, the UK GDPR and EU GDPR require us to name a lawful basis for each purpose. Ours are:
| What we do | Lawful basis |
|---|---|
| Serve the website and keep it secure | Legitimate interests: running and protecting the service you asked to use |
| Reply to a message you sent us | Legitimate interests, and your consent in sending it |
| Analytics cookies | Consent, given through the cookie banner and withdrawable at any time |
How long we keep things
| Data | Retention |
|---|---|
| Your images | Never held at all, so there is nothing to retain |
| Contact messages | Kept while we deal with your query and for a reasonable period afterwards, then deleted |
| Server and analytics logs | Retained in aggregate; Google Analytics retention is governed by Google's own settings and policies |
| Consent cookie | 365 days if you accept, 30 days if you decline, so we can ask again later |
Who we share data with
We do not sell personal information, and we do not share it with anyone for their own independent marketing. The only third parties involved are the service providers that make the site work: our hosting provider and Google Analytics. If you choose to click an affiliate link, the company you land on becomes a separate controller of whatever it collects from you there. Each processes data under its own policy, linked above. We may also disclose information where we are legally required to, for example in response to a valid legal request.
International transfers
Our service providers, including Google, operate globally, which means data covered by this policy may be processed outside your country, including in the United States. Those providers rely on legal transfer mechanisms such as the European Commission's standard contractual clauses. Since your images never leave your device, none of your image content is subject to any international transfer.
Your rights
Depending on where you live, you have some or all of the following rights over personal data we hold about you:
- Access. Ask what personal data we hold about you and receive a copy.
- Rectification. Ask us to correct data that is wrong or incomplete.
- Erasure. Ask us to delete personal data where we have no overriding reason to keep it.
- Restriction. Ask us to pause processing while a dispute is resolved.
- Objection. Object to processing carried out on the basis of legitimate interests.
- Portability. Receive data you gave us in a portable, machine-readable form.
- Withdraw consent. Withdraw cookie consent at any time, without affecting processing already carried out.
To exercise any of these, contact us and describe what you want. We will respond within one month, which is the period the GDPR allows. There is no charge. In practice the honest answer to most access requests will be short, because we hold very little: no account, no images, no profile.
If you are in California
Under the CCPA and CPRA you have the right to know what personal information is collected, used and disclosed, the right to delete it, the right to correct it, and the right not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined in the CCPA. Use the contact page to make a request.
If you are unhappy with our answer
Tell us first and we will try to put it right. You also have the right to complain to your local data protection authority. In the UK that is the Information Commissioner's Office; in the EU it is the supervisory authority for your country.
Children's privacy
This site is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it. We do not request personalised advertising for users identified as children.
Security
The site is served over HTTPS with HTTP Strict Transport Security, so traffic between your browser and the site is encrypted and cannot be silently downgraded. Because there are no user accounts and no stored images, the categories of data most often exposed in a breach simply do not exist here. Our security page explains our approach and how to report a vulnerability.
Links to other sites
Our guides link to external references such as browser documentation and standards bodies. Once you follow a link you are on someone else's site, governed by their policy, not ours. We choose links carefully but cannot control what those sites do.
Changes to this policy
If we change this policy we will update the date at the top of the page and, for a material change, note it in the changelog. We do not update this date automatically, so the date shown is the date the wording genuinely last changed.
Contact us
Questions about this policy, or about what we hold on you, go to the contact page. Messages are read by the people who build and run the site.