Privacy Policy

Last updated 29 August 2026.

Your images

Your images are never uploaded to us. Every tool on this site — compressing, resizing, converting, cropping, building PDFs, turning PDF pages back into images, shrinking a PDF that is too large, and removing metadata — runs inside your own browser using your device's processor. Your files are read from your disk by the page, processed in memory, and handed back to you as a download.

We never receive them. We cannot see them, store them, scan them, or pass them to anyone else, because they never reach our side at all. This is not a promise about our conduct; it is a property of how the site is built. You can confirm it: open your browser's developer tools, switch to the network tab, and process an image. No request carrying your file is made.

One honest caveat, the same one we would apply to any other site: that is true of the code as it stands today, and any website's code can change. Which is exactly why the check above is worth running on the occasion that matters, rather than once.

When you close or reload the page, everything it was holding is gone.

What we do collect

Nothing that identifies you, and nothing you have to give us. There is no account, no sign-up, no contact form, and no field anywhere on this site that asks for your name or email.

The one record that exists is the ordinary web-server log kept by our host, Cloudflare, which receives every request to every website it serves. It contains your IP address, the page requested, the time, and your browser's user-agent string. We do not query it, and it is not linked to anything else.

Lawful basis. Where UK or EU data protection law applies, that logging rests on our legitimate interest in keeping the site available and defending it from abuse (Article 6(1)(f)). We have no other basis because we process nothing else.

Retention. We set no retention ourselves, because we do not hold the logs. Cloudflare keeps them only as long as needed for security and abuse prevention, under the retention documented in Cloudflare's own privacy policy.

Where it goes. Cloudflare operates a global network, so a request from you may be served by, and logged in, a data centre outside your country. Cloudflare's transfer safeguards are described in the policy linked above.

What we do not do

We do not require an account. We do not ask for your name or email to use any tool. We set no cookies of any kind — advertising, analytics or otherwise. We run no analytics product. We do not sell or share data with data brokers, and there is nothing to sell.

Third-party connections

Everything this site needs — including the code that decodes iPhone HEIC photos and the code that builds PDFs — is served from this domain. No fonts loaded from elsewhere, no embedded widgets, no third-party scripts.

One relationship is unavoidable and worth stating plainly: the site is hosted on and delivered through Cloudflare, which is a content delivery network. Your browser therefore connects to Cloudflare's servers to fetch this page, exactly as it connects to any website's host. Cloudflare necessarily sees your IP address and user-agent in order to deliver the page at all. Beyond that, no other company is contacted while you use a tool.

We enforce this rather than only promising it. The site is served with a Content Security Policy that instructs your browser to refuse any network connection to an address other than this domain. You can see the policy in the response headers, and you can watch it hold in the network tab.

What this site keeps on your device

No cookies of any kind, and nothing that identifies you. Three things are stored locally, all inside your own browser, all readable only by this site, and none of them ever sent anywhere — the Content Security Policy described above makes sending them impossible.

• A copy of the site itself, held in your browser's cache storage by the service worker. This is what makes every tool work with no internet connection at all. It contains the pages, the stylesheet, the code, the iPhone HEIC decoder and the PDF engine — the same files anyone else downloads. Nothing about you and nothing about your images. Clearing site data in your browser removes it.
• The settings you last chose on a tool page, held in local storage: things like the target file size you typed, the output format you picked, the quality slider position. This exists so that someone who compresses to 200 KB every week does not have to retype it every week. It contains no file names, no image data, and nothing derived from your pictures. Clearing site data removes it, and the tools work exactly the same without it.
• Whether you dismissed the offer to install this site, held in local storage as a single yes. After a file finishes, browsers that support it may show one line offering to keep the site on your device so it works with no connection. If you close that line, this remembers it so you are never asked again. It is one value, it says nothing about you, and clearing site data removes it.

Your images are never among the things stored. They are read into memory, processed, handed back to you, and released. Nothing writes them to your disk except your own download or the folder you explicitly choose.

Advertising

There is no advertising on this site today. No ad network is loaded, no ad cookie is set, and the Content Security Policy described above would block an ad script even if one were added by mistake.

The site is free and has running costs, so advertising is the intended way to pay for it. This section is written before that happens rather than after, because a privacy policy that changes quietly on the same day the code changes is worth very little. If and when ads are switched on, three commitments hold:

• Never on the pages where you hand over a file. The tool pages — compress, resize, convert, crop, rotate, to PDF, PDF to JPG, compress PDF and metadata — keep the strict policy that forbids any connection to another company. Ads would appear only on the written guides. That is not a preference; it is the difference between a promise and something your browser enforces, and the enforcement is what makes the promise worth reading.
• Your images stay out of it regardless. Advertising code cannot see them. It runs in the page, your pictures are processed in memory, and nothing on this site ever sends an image anywhere. That does not change under any advertising arrangement.
• Named, not hinted at. The provider will be named here, together with what it stores on your device, before the first ad is served — along with the date, so you can see which came first.

Advertising also brings consent obligations in the UK and EU. If ads are introduced, visitors in those regions will be asked for consent through a certified consent platform before any advertising cookie is set, and refusing will keep every tool fully working. There is no version of this site where the tools are gated behind accepting anything.

Children

This site is not directed at children, and we do not knowingly collect information from them. Since we collect no personal data from anyone, there is nothing held about a child either. Age thresholds differ by country — 13 in the United States, and between 13 and 16 across the EU and UK — and no threshold changes what is on this page, because the answer is the same at every age.

Your rights

Because we do not collect personal data tied to you, there is generally nothing for us to look up, correct, export or delete. If you believe we hold information about you and want it removed, contact us and we will act on it.

Where UK or EU law applies, you also have the right to complain to a supervisory authority — in the UK, the Information Commissioner's Office; in the EU, the data protection authority of the country you live in. You do not have to raise it with us first, though we would rather you did, because we can usually answer faster.

Changes

If this policy changes, the date at the top will change with it. Material changes will be described here rather than made quietly.

Contact

Questions about this policy, or a request about your data: get in touch. The operator's identity and postal details are on that page.