Effective / last updated: 11 October 2026 · Version IMGPROCESS-LEGAL-2026-10-11-1.1
Scope and operator
This policy applies to www.imgprocess.com and the tools made available on this website. “ImgProcess”, “we”, “us” and “our” refer to the website operator identified below. It explains the current website configuration, rather than promising that every feature is offline or that no third party receives information. Separate third-party sites and any future mobile applications have their own notices.
The website provides browser image tools and optional connected image assessments. Visiting the website requires requests to hosting infrastructure even when the selected image is processed locally. Read the processing notice on the tool you intend to use before selecting confidential material.
Local image processing
Compression, resizing, format conversion, editing, background cutouts, colourization and restoration use the selected file in your browser for their implemented local operations. This includes locally downloaded model and runtime assets where applicable. Selecting an image for these operations does not intentionally upload its pixels to an ImgProcess photo storage server. Temporary previews, decoded pixels and working copies can remain in browser memory until reset, navigation or tab closure.
Local processing does not mean that your entire session is anonymous. Requests for website pages, scripts and models expose ordinary network information to the hosting infrastructure. Extensions, shared devices, malware, screen capture software, other open applications and your own subsequent sharing are outside this local-processing promise. Downloaded output remains wherever you save it.
Connected Image Investigation
Image Investigation includes local checks and can call configured external services through ImgProcess server endpoints after you accept the analysis acknowledgment and start the investigation. The selected image is sent to the server for connected checks; the AI detector integration can forward the image and its filename to Sightengine. The visual consistency integration can forward image content, encoded as image data, and a review instruction to Groq. A service without working configuration may be unavailable.
The analysis interface records a generated case identifier, analysis timestamps, file information, available metadata, hashes, findings, provider request references and a local audit trail for the assessment and report. The current application does not implement a central permanent acknowledgment database or an identity-verification service. It does not claim a complete legal chain-of-custody record. Hosting or provider request logs can exist separately.
Selected files may include faces, location details, documents or other personal information in pixels and metadata. You must have a lawful basis and the necessary rights to submit them. Avoid submitting sensitive, confidential or children’s material to connected services unless you have reviewed the relevant processing terms and are authorized to do so. Resetting the browser does not recall an image already transmitted to a provider.
Website usage and analytics
If you accept optional analytics, Google Analytics 4 (measurement ID G-7GRFH0X7LY) receives website usage information to help us understand traffic and improve the service. This can include page addresses and titles, referrer information, device and browser characteristics, approximate geographic information, timestamps, cookie identifiers and enabled measurement interactions. Requests to Google also involve network information. Google’s processing is described in its own policies.
This release blocks loading the Google Analytics tag until you choose to accept analytics. Rejecting analytics does not disable the image tools. Google signals and ad personalization signals are disabled in this tag configuration. These settings do not mean that Google receives no data after you opt in.
The integration does not deliberately add selected image pixels, filenames, extracted metadata, forensic case identifiers or report content to analytics events. Page URLs and any information in query strings can still be measured, so do not put private information in a URL. Changes to account-level measurement settings must be checked against this policy.
Cookies, local storage and choices
We store your analytics choice locally on your device for up to 180 days, unless you clear it or the policy version changes. This preference storage allows us to respect your decision. If you accept analytics, Google can set analytics cookies such as _ga and property-specific _ga cookies. Their lifetime depends on the Google configuration and browser behaviour. Model and website caches are different from advertising identifiers.
Use Cookie preferences in the footer or the cookie policy to accept or reject optional analytics later. Withdrawing consent disables future analytics in this implementation, attempts to remove accessible Google Analytics cookies and reloads the page. It does not erase information already transmitted to Google. Browser storage controls can remove cookies and the preference record; the choice may then be requested again.
Hosting, security and support
The live site is hosted on Vercel. Delivering pages and handling API requests can involve IP addresses, request URLs, timestamps, browser headers, status codes, diagnostics and security or abuse signals. Hosting logs and service telemetry are subject to the operator’s configuration and the provider’s terms. The application is not configured here to maintain a public photo gallery or an account-based image archive.
When you contact us, we receive the information you choose to send, such as your email address, issue description and attachments. Use a nonsensitive example where possible. We use correspondence to respond, troubleshoot, manage rights requests and keep necessary records. Do not email originals containing unnecessary personal data.
Purposes and legal grounds
We use information to deliver requested features, remember privacy choices, maintain security, investigate faults, respond to communications and meet applicable legal obligations. Optional analytics relies on your choice to accept it. Where data protection law requires a legal basis, operating and securing the website may rely on legitimate interests where permitted; fulfilling a requested service may rely on contractual necessity where applicable; and legally required records may rely on a legal obligation.
The analysis acknowledgment describes technical limitations and authorizes the requested operation; it is not blanket consent to unrelated advertising or unlimited reuse of personal information. Where images depict other people, accepting the acknowledgment does not replace the rights or other lawful basis required to process their information.
Recipients and international processing
Information may be processed by hosting and infrastructure services, Google for accepted analytics, and configured image-analysis providers for requested connected checks. Support communications may pass through the operator’s email provider. Authorized persons may access necessary support or technical records. We may disclose information where lawfully required or necessary to respond to security incidents or protect legal rights, subject to applicable law.
Providers can operate outside your country. Applicable contracts, provider arrangements and any required transfer safeguards must govern those transfers. This policy does not promise that processing stays in Pakistan or another particular country. Refer to the provider links below and contact us for information about the deployed arrangements.
Retention and deletion
Local tool working data is held for the current browser operation; saved outputs, reports, caches and preference records can last longer on your device. This application’s connected API routes process requests without intentionally creating a persistent image archive. That does not establish a zero-retention guarantee for hosting logs, support attachments, diagnostics or external providers.
We retain support and operational records only as needed for their purpose, legal obligations, security and resolving disputes. Exact provider-side retention and analytics settings depend on the deployed accounts and contracts. Contact us for the applicable period or deletion options; we do not publish an invented fixed retention promise. You may delete your own saved outputs and clear browser storage independently.
Advertising status and future monetization
No advertising-network script is installed in this release; reserved ad spaces are placeholders. We do not currently use this release to sell or share personal information for targeted advertising. Analytics is separate from a future advertising integration.
If Google AdSense or another advertising network is enabled, this notice must identify the active vendors and their privacy links. Advertising vendors, including Google when enabled, may use cookies, web beacons, IP addresses and other identifiers to deliver, measure and secure ads. Google advertising cookies can support ads based on visits to this and other websites, subject to choices, configuration and applicable law.
You can review Google’s advertising controls and industry opt-out resources linked below. Those resources do not replace an on-site consent mechanism. Advertising must not be enabled merely because this future-facing disclosure exists. The analytics preference control in this release is not a certified advertising consent management platform.
Your rights and requests
Depending on your location and the law that applies, you may have rights to access, correct, delete or obtain a copy of personal information, restrict or object to processing, withdraw consent, or complain to a competent data protection authority. Where applicable, rights concerning sale, sharing or targeted advertising must also be respected. These rights can be subject to lawful exceptions.
Use the privacy contact below or the Contact page. Explain your request and the relevant interaction without attaching unnecessary sensitive files. We may ask for proportionate information to verify the request and protect others’ privacy. We respond within the period required by applicable law. We cannot retrieve a local-only image that you never transmitted, and provider-held data may require coordinated handling with that provider.
Children and security
ImgProcess is intended for people able to use the service lawfully and accept its terms, and is not directed at children under 13. Minors must have appropriate parent or guardian involvement and meet any higher local age requirements. Do not knowingly send a child’s personal information to connected assessment services without a lawful basis and necessary permissions. Contact us if you believe we have improperly received a child’s personal information.
We use reasonable safeguards appropriate to the service, but no website, transmission or device can be guaranteed completely secure. Keep originals backed up, protect shared devices and assess whether connected analysis is suitable for the sensitivity of the material.
Changes to this policy
We may update this notice as the service or applicable requirements change. The date and version below identify this revision. Material changes will be communicated as appropriate, and new consent will be requested where required. A policy update does not retroactively authorize a new unrelated purpose.
Privacy choices and provider information
- Google Privacy Policy and how Google uses information from partner sites
- Google Analytics browser opt-out information
- Google advertising preferences and participating advertising vendors’ opt-out choices (relevant if advertising is enabled)
- Vercel hosting privacy notice
- Sightengine privacy policy for connected detector processing
- Groq privacy policy and API data information for configured visual assessment
Operator and contact
Website operator: IMGProcess
Privacy and legal enquiries: imgprocess.com@gmail.com