Privacy Policy

• Your images never leave your device. They are not uploaded, not stored, and not seen by us. There is no endpoint that accepts image data.
• You can use the service without an account. If you never sign in, we hold no personal data about you at all.
• Signing in is only needed to buy and keep a Pro licence. It gives us your Google profile basics and nothing more.
• There is no analytics, no tracking, no advertising, and we do not sell or rent data to anyone.

Compression, format conversion, resizing and renaming all run inside your own browser, on your own machine. Your image files, their contents and their metadata are never transmitted to us or to any third party, and are never written to our servers.

Because we never receive your images, we cannot read them, cannot share them, and have nothing about them to delete.

The service is usable anonymously. The data below is collected only if you choose to sign in with Google, and only for the purposes listed.

• Google profile basics — your name, email address, whether Google has verified that email, and your profile picture URL. Used to identify your account and show you which account you are signed in as.
• Google sign-in tokens — the OAuth tokens Google issues so we can confirm the sign-in and keep your session valid. Stored on our server, never exposed to the browser.
• Session records — a session token and its expiry, plus the IP address and browser user agent of the sign-in. Used to keep you signed in and to spot abuse of the sign-in system.
• Licence status — whether your account is Pro, the date it became Pro, and the customer and order identifiers issued by our payment provider. Used to unlock Pro features and to reconcile payments and refunds.
• Your saved presets — the name you give a preset and the settings it holds (output format, quality, effort, resize width and whether compression or resizing is enabled). Used to sync your presets across your devices.
• Payment webhook records — the identifier and type of each payment event our provider sends us, and when it arrived. Used so a repeated event is not applied twice, and to reconcile purchases.

That is the complete list. We do not collect analytics events, behavioural profiles, device fingerprints, or any data about how you use the tool.

When you sign in with Google we request only the basic profile scopes: your name, email address and profile picture. We do not request access to Gmail, Drive, Contacts, Calendar or any other Google service.

That data is used solely to create and identify your account and to attach your Pro licence to it. It is stored on our own server database and is not shared with anyone except the infrastructure providers described below.

Limited Use: our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell or transfer it, and we do not use it to train generative machine-learning models. You can review or revoke this access at any time in your Google account permissions.

Pro is sold through Polar, which acts as the merchant of record for the purchase. Your card details are entered on Polar's systems and are never seen, handled or stored by us. We receive only the customer and order identifiers needed to grant your licence and to revoke it if the order is refunded.

We do not sell, rent or trade personal data. It is shared only with the providers needed to run the service:

• Google — authenticates your sign-in.
• Polar — processes payments and sends us purchase and refund events.
• Our hosting and database providers — run the servers and database that store the account data listed above, on our instructions.

We may also disclose data where we are legally required to do so.

We set one cookie: the session cookie that keeps you signed in after you authenticate. It is strictly necessary for the sign-in to work and is removed when you sign out or when the session expires. We use no analytics, advertising or tracking cookies, and we do not embed third-party trackers.

Account data, licence status and presets are kept for as long as your account exists, because the Pro licence is tied to it. Sessions expire on their own and are removed. Payment event records are kept for as long as we need them to reconcile purchases and refunds.

Email [email protected] from the address you signed in with and ask us to delete your account. We will confirm and complete the deletion within 30 days.

Deletion removes your account record, your sign-in sessions and tokens, and your saved presets. Please note that deleting your account also gives up your Pro licence, because the licence is attached to that account. We may retain the minimum payment record required for accounting and tax purposes.

You can ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete it — write to [email protected]. You can also revoke this app's access to your Google account at any time from your Google account permissions page, and you can use the free tool without an account at all.

Traffic to the site is encrypted in transit. Sign-in secrets and payment credentials are held on the server only and are never sent to the browser. No system is perfectly secure, but the strongest protection here is structural: the data we could lose is limited to the short list above, because your images are never sent to us in the first place.

The service is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.

If this policy changes materially — for example if we start collecting something new or add a provider — we will update the effective date at the top of this page. Continuing to use the service after that means you accept the updated policy.

Image Optimizer is operated by Khanh Nguyen, who is responsible for the data described here. Questions about this policy or about your data: [email protected].