Privacy Policy

Last updated: June 5, 2026

Privacy-first architecture: Image processing happens entirely on your device. No image data is ever transmitted to or stored on any server — this is a technical property of the service, not merely a policy commitment.

This Privacy Policy explains how ImageToolSuite collects, uses and protects personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Austrian law. We take privacy seriously and have designed this service to process as little personal data as technically possible.

1. Data Controller

The data controller responsible for this website is:

Georg Höfner-Harttila
Linzer Straße 17, 4100 Ottensheim, Austria
Email: imagetoolsuite@smartseize.com

For all privacy-related inquiries, please contact us at the email address above.

2. How This Tool Works – Local Processing

Images are processed exclusively and entirely within the user's browser. No image data is uploaded to any server at any time.

When you use any tool on ImageToolSuite — including the image checker, resize tool, compression tool, DPI checker or any other image processing feature — your image files are loaded directly into your browser's memory using standard browser APIs (HTML5 File API and Canvas API). All analysis, processing and transformation happens locally on your device.

Your images never leave your device. They are not transmitted to our servers, not stored on any server, not logged and not accessible to us in any form. This is a fundamental technical property of the service, not merely a policy commitment.

Processed or downloaded output files are generated in your browser and delivered directly to your device via the browser's native download mechanism — again without any server involvement.

3. Data We Collect

3.1 Server Logs

When you visit this website, standard technical data is automatically recorded in server log files, including IP address, browser type, operating system, referrer URL and time of access. See Section 4a for full details.

3.2 Data You Provide Voluntarily

If you contact us by email, we will process the personal data you include in that communication (name, email address, message content) solely for the purpose of responding to your inquiry. The legal basis is Article 6(1)(b) GDPR (processing necessary to take steps at the request of the data subject) or Article 6(1)(f) GDPR (legitimate interest in handling correspondence). We do not store contact data beyond the period necessary to handle your inquiry, unless legal obligations require longer retention.

4. Hosting and Content Delivery Network (CDN)

This website uses a Content Delivery Network (CDN) and hosting services provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.

Cloudflare helps deliver content efficiently and protects the website against technical attacks and abuse. For this purpose, requests to this website are processed through Cloudflare's infrastructure. Cloudflare may process personal data such as IP addresses, browser information and request metadata where necessary to provide its services.

This processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in ensuring the secure, reliable and efficient operation of the website.

For transfers of data to the United States, Cloudflare participates in the EU-U.S. Data Privacy Framework and provides additional safeguards through the EU Standard Contractual Clauses (SCCs). For further information, please refer to Cloudflare's Privacy Policy at cloudflare.com/privacypolicy.

4a. Server Log Files

The hosting provider automatically collects and stores information in server log files, including IP address, browser type, operating system, referrer URL and time of access. These data are used solely to ensure the technical operation, security and stability of the website and are not combined with data from other sources.

The legal basis for this processing is Art. 6(1)(f) GDPR (legitimate interest in maintaining the secure and reliable operation of the website).

Log data is retained only for as long as necessary for security, operational and troubleshooting purposes and is automatically deleted thereafter, unless longer retention is required to investigate security incidents or comply with legal obligations.

5. Cookies and Local Storage

This website uses no tracking cookies, analytics cookies, marketing cookies or persistent identification cookies.

The website may use technically necessary browser storage mechanisms, including sessionStorage and localStorage, solely for the purpose of providing and maintaining functionality of the tools. Examples may include remembering selected settings or preferences while using the website.

Any such data remains stored exclusively on your device and is never transmitted to our servers. We do not use browser storage to track users across websites, create user profiles or identify returning visitors.

6. Third-Party Services

This website currently uses the following third-party resources:

• jsDelivr CDN (Prospect One, Królewska 65A/1, 30-081 Kraków, Poland): Used to deliver JavaScript resources required for the functionality of this website. When these resources are loaded, jsDelivr may technically log your IP address and request metadata as part of standard CDN operation. This is technically necessary for content delivery. No personal data from your images is transmitted. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in efficient and reliable content delivery). See jsDelivr's Privacy Policy for details.

We do not use Google Analytics, Meta Pixel, advertising networks, social media tracking scripts, heatmap tools or any other behavioral tracking technology. No data about your usage of this website is sold or shared with third parties for marketing purposes.

7. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights with respect to any personal data we process about you:

• Right of access (Art. 15 GDPR): You have the right to request confirmation of whether we process personal data about you and, if so, to receive a copy of that data.
• Right to rectification (Art. 16 GDPR): You have the right to request correction of inaccurate personal data we hold about you.
• Right to erasure (Art. 17 GDPR): You have the right to request deletion of your personal data where there is no compelling reason for continued processing.
• Right to restriction of processing (Art. 18 GDPR): You have the right to request that we restrict processing of your personal data under certain circumstances.
• Right to data portability (Art. 20 GDPR): Where processing is based on consent or contract and carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21 GDPR): You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis.
• Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us at: imagetoolsuite@smartseize.com

You also have the right to lodge a complaint with the competent supervisory authority. In Austria, this is:

Österreichische Datenschutzbehörde
Barichgasse 40–42, 1030 Wien
Website: www.dsb.gv.at

8. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected:

• Server logs: Retained only for as long as necessary for security, operational and troubleshooting purposes and automatically deleted thereafter.
• Email correspondence: Retained only for the duration necessary to handle your inquiry, typically no longer than 6 months, unless legal obligations require longer retention.
• Image data: Not retained at all — images never leave your browser and are never stored on any server.

9. Security

This website is served exclusively over HTTPS (TLS encryption), which protects data in transit between your browser and our infrastructure. Cloudflare's network provides additional DDoS protection and security hardening at the infrastructure level.

Since image files are never transmitted to or stored on any server, there is no risk of image data being exposed through a server-side security incident. The local processing architecture is itself the primary security measure for your image data.

10. Automated Decision-Making and Profiling

No automated decision-making or profiling takes place on this website. We do not use personal data to build user profiles, make automated decisions with legal or similarly significant effects, or infer characteristics about individual users.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal obligations. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

Continued use of this website after any changes constitutes acceptance of the updated policy. If you do not agree with the updated policy, please discontinue use of the website.

12. Contact

For any questions or concerns regarding this Privacy Policy or our data processing practices, please contact us at:

Georg Höfner-Harttila
Linzer Straße 17, 4100 Ottensheim, Austria
Email: imagetoolsuite@smartseize.com