Privacy Policy

Your Images Never Leave Your Device

Every image tool on this site runs entirely inside your browser. When you open a file, it is decoded onto a canvas on your own computer or phone and processed there by JavaScript and WebAssembly. The file is never uploaded to us, never stored on our servers, and never seen by anyone. Close or reload the page and it is gone from memory; there is nothing on our side to delete, because nothing arrived. This applies to background removal and image enhancement too — both run on your device.

• We do not have user accounts. There is no sign-up, no login, and we never ask for your name, email address, or payment details to use a tool.
• We do not receive your filenames, your image contents, or anything derived from your image pixels.
• One tool is a genuine exception, and it is worth being precise about it: HTML to Image asks you to type a web address so it can load that page and photograph it. That address — not an image — is sent to our server to make the request, and is not retained afterwards.
• An earlier version of this policy said images might be sent to outside AI providers for background removal or enhancement. That is no longer how these tools work, and this section describes what the site actually does today.

Advertising

This site is free to use and is funded by advertising. We use Google AdSense to display ads. Google is a third-party vendor and uses cookies to serve ads on this site.

• Google's use of advertising cookies — including the DoubleClick cookie — enables Google and its partners to serve ads to you based on your visit to this site and other sites on the internet.
• Third-party vendors and ad networks other than Google may also serve ads on this site and may use their own cookies to do so. We do not control those cookies.
• Advertising is targeted using general signals such as the page you are on, your approximate location and your browsing history — never using the images you process here, which we never receive.
• You can opt out of personalised advertising at any time using the links below. In the European Economic Area, the United Kingdom and Switzerland, the consent banner shown on your first visit refuses advertising cookies outright before any is set.

• Google Ads Settings — turn off personalised ads from Google
• How Google uses information from sites that use its services
• Digital Advertising Alliance — opt out of many ad networks at once
• Network Advertising Initiative — member opt-out page

Analytics

We use Google Analytics 4 to understand which tools people use and where the site is failing them. It is deliberately configured to measure usage, not people. In the European Economic Area, the United Kingdom and Switzerland it stays switched off until you accept; everywhere else it is on by default and you can opt out with the link below.

• What is sent: the page path you viewed, your language version, which tool you used, whether you started, finished or downloaded a result, how many files were in the batch, and their total size in kilobytes.
• What is never sent: filenames, image contents, thumbnails, or anything computed from your image pixels.
• Google Analytics 4 does not log or store IP addresses. We cannot identify you personally from anything in our analytics.

• Google Analytics opt-out browser add-on

Your Consent Choices

What happens on your first visit depends on where you are. In the European Economic Area, the United Kingdom and Switzerland we ask before setting any non-essential cookie, and until you accept, advertising and analytics storage are switched off at the source using Google Consent Mode — Google’s tags are told not to store or read cookies rather than simply being asked politely. Everywhere else that opt-in rule does not apply, so advertising and analytics start enabled and you can switch them off at any time using the opt-out links on this page.

• Choosing "Essential only" leaves advertising and analytics storage denied. The tools all keep working — none of them needs a cookie to function.
• Choosing "Accept all" grants advertising and analytics storage, and personalised advertising becomes possible.
• If you are in the European Economic Area, the United Kingdom or Switzerland, you are shown a Google-certified consent message that records your choice for our advertising partners.
• If you were shown the banner, you can change your mind at any time by clearing this site’s data in your browser settings, which removes the stored choice and brings the banner back. If you were not shown one, the opt-out links in the Advertising and Analytics sections do the same job.

Cookies and Local Storage

Cookies and browser local storage are used for three separate purposes here, and they are worth keeping apart because only two of them need your permission.

• Essential storage: your cookie choice and your language preference, kept in your browser’s local storage. These are not sent to any third party and are not used to track you. They are set regardless of your choice because the site cannot remember your decision otherwise.
• Advertising cookies: set by Google and other ad vendors, only after you accept. See the Advertising section above.
• Analytics cookies: set by Google Analytics, only after you accept. See the Analytics section above.
• Every browser lets you block or delete cookies through its settings. Blocking advertising and analytics cookies has no effect on the image tools.

Third-Party Services

The complete list of outside services that can receive any information about your visit is short, and this is all of it.

• Google AdSense — serves the advertising that funds the site, and sets advertising cookies once you consent.
• Google Analytics 4 — measures usage as described above, once you consent.
• Cloudflare — hosts and delivers the site. As with any website, its servers process the technical details of each request, such as your IP address, browser and the page requested, in order to deliver the page and to block abuse.
• Google Fonts, self-hosted — the site’s typefaces are served from our own domain, so loading a page does not send a request to Google’s font servers.

Data Security

The strongest security measure on this site is architectural rather than procedural: because your images are processed on your own device and never transmitted, there is no store of user images to be breached, leaked or subpoenaed. The site is served exclusively over HTTPS. The third-party services listed above are responsible for the security of the data they collect under their own policies.

How Long Data Is Kept

Different categories are kept for different periods, and most of them are not ours to keep.

• Your images: not retained, because they are never received.
• Analytics data: retained by Google Analytics for 14 months, then deleted automatically.
• Advertising data: governed by Google’s own retention policies, linked in the Advertising section.
• Server request logs: retained briefly by Cloudflare for delivery and abuse prevention.
• Your consent choice and language preference: kept in your own browser until you clear your site data.

Your Rights

Depending on where you live you have rights over personal data held about you. One honest caveat applies throughout: we run no accounts and hold no identifier that links data to you, so for most requests there is genuinely nothing on our side to retrieve — but your rights against Google, which does hold advertising and analytics data, are real and exercisable through the links above.

• If you are in the EEA or the UK, the GDPR gives you the right to access, correct, erase, restrict and object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time.
• You also have the right to lodge a complaint with your national data protection supervisory authority.
• If you are in California, the CCPA and CPRA give you the right to know what is collected, to have it deleted, and to opt out of the sale or sharing of personal information. We do not sell personal information. Personalised advertising may count as "sharing" under the CPRA, and declining advertising cookies in the consent banner opts you out of it.
• To exercise any of these rights, or to ask what we hold, email privacy@picoimage.com.

Children's Privacy

This site is a general-purpose set of image tools and is not directed at children. We do not knowingly collect personal information from children under 13, or under 16 in jurisdictions where that is the applicable threshold. If you believe a child has provided us with personal information, email privacy@picoimage.com and we will act on it.

Changes to This Policy

When this policy changes, the "Last updated" date at the top changes with it, and the previous wording is replaced rather than quietly amended. If a change materially affects how your data is handled — a new advertising partner, a new category of collection — we will surface a notice on the site rather than relying on you to re-read this page.

Contact Us

Questions about this policy, or about anything on this site, are welcome. Email privacy@picoimage.com for privacy and data protection matters, or support@picoimage.com for everything else. We aim to reply within five working days.