Privacy Policy

All processing happens locally using your browser's Canvas API and WebAssembly. When you drop a file onto imgkilo, it is read into memory in your browser and worked on there. It is never uploaded, copied to a server, or stored by us.

You can verify this yourself: open your browser's developer tools, switch to the Network panel, and process an image. You will see no file upload requests leave your machine.

imgkilo does not ask you to register, log in, or provide an email address to use any tool. There is no user database, because there are no user accounts.

If, and only if, you accept analytics cookies, we load Google Analytics 4 to understand which tools people use and how pages perform, so we can prioritise improvements. The data Google Analytics collects on our behalf is limited to standard, non-identifying measurement:

• Pages you view on imgkilo, including the page URL, page title, and the referrer that sent you to us.
• Approximate location — country, region, and city — derived by Google from your IP address. Google Analytics 4 does not log or store the IP address itself.
• Device and browser information such as device type (mobile, tablet, or desktop), operating system, browser, screen size, and language.
• Basic engagement signals such as session start, time on page, scrolls, and clicks on outbound links (Google Analytics calls these "enhanced measurement" events).
• A randomly generated identifier, stored in the first-party cookies described below, that lets Google distinguish a new visit from a returning one. It is not tied to your name or any account, because imgkilo has no accounts.

Analytics is deliberately blind to anything sensitive. In particular, it never receives:

• The contents of your images, or any image at all — every file is processed on your device and is never part of an analytics event.
• Your name, email address, or any account details, because there are no accounts.
• Your precise location, advertising identifiers, or data used to build an advertising profile. Our analytics denies Google's ad-storage and personalisation signals by default.

Analytics cookies are off by default. The first time you visit, a consent banner asks whether you accept them, and nothing is loaded until you choose. We use Google's Consent Mode v2, so until you opt in, Google's tag is held in a denied state and sets no analytics or advertising cookies. If you decline, no analytics cookies are ever set.

When you do accept, Google Analytics sets first-party cookies in your browser — typically named "_ga" and "_ga_<container-id>" — which store the random visitor identifier and session state. These are readable only on imgkilo.com and are not advertising cookies.

You can change your decision at any time using the "Cookie preferences" link in the footer. Withdrawing consent stops further analytics collection; you can also clear the cookies through your browser at any time.

We show ads through Google AdSense. Advertising cookies are set only if you accept them in the consent banner; until then, Consent Mode v2 keeps Google's advertising storage in a denied state. We do not sell your personal data.

Analytics is provided by Google, which acts as a data processor and may process this measurement data on servers outside your country, including in the United States. You can review how Google handles this data in the Google Privacy Policy and How Google uses information from sites that use its services.

The site itself is served as static files through a content delivery network and self-hosts its fonts, so no other third-party trackers are needed to render a page. Outbound links in our written guides point to reputable references such as MDN and Wikipedia and are clearly marked.

Everything in this section applies to the ImgKilo app for Android (package name com.imgkilo.imagecompressresizeapp), available on Google Play.

Exactly like the website, the app processes every image on your device. Compressing, resizing, cropping, converting, batch processing, background removal, and passport photo creation all run locally using on-device code. Your photos are never uploaded to us or to anyone else, and the app has no accounts and no user database.

Google's ML Kit features (background removal and face detection for passport photos) also run entirely on-device. The models are downloaded to your phone once via Google Play services; your images are not sent to Google for processing.

The app requests only what its features need:

• Photos (READ_MEDIA_IMAGES) — to let you browse and batch-select the images you want to edit, show your recent images, and re-open originals from your processing history. Reading your library is the app's core function; images are only ever read, processed, and saved back on your device.
• Camera — only when you choose to capture a new photo from inside the app (for example a passport photo). The app never accesses the camera in the background.
• Notifications — to show a progress notification while a batch export runs, and a completion notice when it finishes. Declining this permission never blocks processing.

The Android app is free and supported by ads served through Google AdMob. To serve and measure ads, the Google Mobile Ads SDK processes device information and, where permitted, your device's resettable advertising ID. In regions with consent requirements (such as the EEA and UK), the app shows Google's consent form before any ad request is made, and respects your choice. You can reset or delete your advertising ID at any time in Android settings (Settings → Privacy → Ads).

We use Google Analytics for Firebase to understand which tools are used and how the app performs (for example, which feature was opened and whether an export succeeded). This telemetry is pseudonymous — tied to a random app-instance identifier, not your name — and never includes your images or their contents.

We use Firebase Crashlytics and Firebase Performance Monitoring to collect crash reports and performance traces (device model, OS version, stack traces, timing data) so we can fix bugs. Crash reports never include your images.

The app also fetches a small remote configuration from Firebase (feature switches and app constants). This request carries no personal data beyond standard connection metadata.

These services are provided by Google LLC, acting as our processor, and may process the data described above on servers outside your country, including in the United States. See the Google Privacy Policy for how Google handles this data.

The app never uploads, stores, or receives your images or any content inside them. We collect no name, email, contacts, messages, precise location, or biometric data. Face detection for passport photos runs on-device and produces only crop geometry — no face data ever leaves your phone. We do not sell personal data.

Analytics and crash data are retained by Google on our behalf for a limited period (Firebase Analytics data for up to 14 months) and then deleted automatically. Your processing history and settings live only on your device — clearing the app's storage or uninstalling removes them completely.

Because the app holds no account and no personal data on our servers, there is usually nothing for us to export or delete. If you would like the pseudonymous analytics identifier associated with your app instance deleted, email hello@imgkilo.com and we will action it.

Neither the website nor the app is directed at children under 13, and we do not knowingly collect personal information from children.

If you have a question about this policy, email hello@imgkilo.com. Because we hold no personal data, there is generally nothing for us to export or delete on request, but we are happy to clarify how the tools work.