Privacy Policy

Your privacy matters. Here's exactly what happens, and what does not happen, when you use XpressImgTools.

Last updated: July 2026

Image processing

XpressImgTools is designed to process images directly in your browser using client-side JavaScript, browser APIs, and WebAssembly where applicable.

The images you select, drop, edit, resize, compress, crop, convert, or generate are designed to remain on your device and are not intentionally uploaded to or retained by us.

Limited technical requests required to operate, secure, measure, and improve the website may still occur. This includes requests for the page itself and related assets such as HTML, CSS, JavaScript, fonts, icons, advertising scripts where enabled, analytics scripts where enabled, and security services such as Cloudflare.

We do not intentionally collect, store, review, or have access to the images you process through the tools.

The Feedback form

The Feedback button in the site navigation opens a contact form. When you click Send, the form is transmitted cross-origin to a shared contact endpoint on XpressDevTools , our sibling site where the contact backend lives.

When you submit the Feedback form, we transmit the following to our server:

  • Your name, email address, subject, and message — exactly as you typed them.
  • Your IP address, used for spam protection, rate limiting, Cloudflare Turnstile validation, and optional country lookup.
  • A country code derived from your IP address, recorded on the resulting email so we can prioritize responses and detect abuse patterns.

The message is delivered to a real inbox by email. We do not persist it in a database. Feedback emails older than 90 days are deleted from the inbox as a matter of standard hygiene. If you would like yours deleted sooner, send another feedback message asking us to delete it.

Server logs

Like most web servers, ours may record standard access logs, including timestamp, request path, status code, response size, user-agent, referrer, and source IP address.

These logs are kept for up to 14 days for abuse prevention, security monitoring, operational debugging, and service reliability, then rotated out.

Advertising

We may display ads through third-party advertising networks such as Google AdSense. These networks may use cookies or similar technologies to serve, measure, and personalize ads, depending on your consent choices and applicable law.

You can opt out of personalized advertising via Google Ads Settings or through your browser's tracking-protection controls.

We do not share image data with advertisers. Ads are placed based on page context, advertising settings, consent choices, and third-party ad network behavior — not on the images you process.

Analytics

We may use lightweight analytics to understand which tools are popular, how the site performs, and where improvements are needed. Analytics events are not intended to identify you personally and are not associated with the images you process through the tools.

The images you process are not sent to analytics providers by us.

If we use a specific analytics provider, such as Cloudflare Analytics, Google Analytics, Plausible, Umami, or similar services, that provider may process limited technical information according to its own privacy policy.

Cookies and local storage

The site uses a small number of cookies and similar browser storage mechanisms:

  • Theme preference — stored in localStorage and used to remember your dark/light mode choice.
  • Cookie consent — stored in localStorage and used to remember whether you accepted or rejected non-essential cookies on this site.
  • Cloudflare Turnstile — used only where bot protection is required, such as the Feedback dialog.
  • Advertising cookies — may be set by Google AdSense or related advertising services where present and where permitted by your consent choices and applicable law.
  • Analytics cookies or identifiers — may be used by analytics services where enabled and permitted.

Non-essential cookies are only loaded after consent where required by applicable law.

You can clear cookies and local storage at any time through your browser settings. Where available, you may also reset your choices through the cookie banner or consent controls.

Third-party services

We may use third-party services and providers, including but not limited to:

  • Cloudflare, including TLS, edge services, security, and Turnstile;
  • Google Fonts;
  • Google AdSense;
  • Font Awesome;
  • XpressDevTools, for the shared Feedback contact endpoint; and
  • Analytics, hosting, infrastructure, or performance providers.

These services may process limited technical information according to their own privacy policies and terms.

Legal basis for processing

Where applicable under privacy laws such as GDPR, UK GDPR, or similar privacy frameworks, we process limited personal information on the following bases:

  • Legitimate interests — operating the Service, protecting it from abuse, preventing spam and fraud, debugging issues, maintaining security, and improving reliability.
  • Consent — where you choose to submit feedback, accept non-essential cookies, interact with advertising services, or use optional features that require additional processing.
  • Legal obligations — where processing is required to comply with applicable laws, regulations, or lawful requests.

International data transfers

Some third-party providers used by the Service, such as Cloudflare, Google, hosting providers, infrastructure services, and the shared XpressDevTools feedback endpoint, may process limited technical information in countries outside your own jurisdiction, including the United States.

These providers maintain their own privacy, security, and transfer safeguards. Your use of the Service may involve processing by those providers according to their own policies.

GDPR / UK GDPR / data subject rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or request a copy of personal information associated with you.

In practice, XpressImgTools stores very little identifying information: there is no account, no profile, and no database row with your name on it.

If you submitted a Feedback message, you can ask us to delete the resulting email at any time. Use the Feedback form for the contact method and include enough detail for us to locate the message.

Server logs are short-lived and normally cannot be searched by name or email address because they are not stored with that context.

Children's privacy

XpressImgTools is not directed at children under 13. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy occasionally. The current version will always be available at this URL and will include the updated effective date.

Related

Use of XpressImgTools is also governed by our Terms of Service.

Contact

Questions about this Privacy Policy?

Please use the Feedback button available in the site navigation.