प्राइवेसी पॉलिसी

iZip IMG provides online tools for compressing, converting, resizing, cropping, rotating, and watermarking images. This Privacy Policy applies when you visit izipimg.com, use those tools, change website preferences, or contact us.

The service handles only the information needed to provide its current features: files and settings submitted to an image tool, account and sign-in information you choose to provide, information entered in the contact form, browser preferences you choose to save, and limited technical request information used to deliver and protect the website. iZip IMG does not currently provide billing, subscriptions, or public API access.

When you create an account, you provide a name, email address, password, and acceptance of the Terms and Privacy Policy. Passwords are stored only as secure password hashes. If you use Google sign-in, iZip IMG receives the basic profile details Google returns, such as your name, email address, verification status, and profile image, and stores the provider identifier needed to recognize the account. The application is configured not to retain Google access, refresh, or ID tokens.

When you contact iZip IMG, you may provide your name, email address, selected subject, message, and a request identifier generated by the form. When you use an image tool, you provide the selected image, its filename and file metadata, and the processing options you choose. Please do not include sensitive personal information that is not needed for your request.

Ordinary web requests include technical information such as request headers, browser or device details, and network address information. The contact endpoint uses a one-way hash derived from the requesting IP address to limit abuse. The site may also read a hosting or CDN country header solely to decide whether to show regional cookie consent. Hosting infrastructure may process standard request logs independently of the application.

Uploaded images are sent to an iZip IMG image-processing endpoint, read into server memory, validated, processed for the action you request, and returned in the response. The application code does not write uploaded images or generated image files to permanent application storage. Responses are marked no-store. iZip IMG does not promise a specific infrastructure deletion time because no verified hosting retention schedule is available in this project.

Information is used to perform the requested image operation, return downloads, create and secure accounts, verify email addresses, authenticate sign-ins, send essential account messages, manage sessions, remember selected language, theme, and consent choices, respond to messages, prevent duplicate contact delivery, limit abuse, troubleshoot failures, and maintain the security and reliability of the service. Image uploads are not added to an account history or public profile.

iZip IMG uses a strictly necessary session cookie for signed-in accounts, a locale cookie, and browser local storage for language, theme, and cookie-preference records. The separate Cookie Policy identifies these records, their purposes, and available controls. This policy does not repeat that detailed inventory.

No optional analytics or performance service is currently configured in the project. The consent interface includes an analytics choice so that consent can be recorded where required, but that choice does not authorize an undisclosed future service. If analytics is introduced, the Cookie Policy and this policy should be updated before it is activated where required.

Account data is stored in the configured MySQL 8 database. Resend is used to deliver verification, password-reset, password-change, welcome, and deletion messages when email delivery is configured. Google processes information when you choose Google sign-in. The contact feature can send a validated submission to a separately configured delivery endpoint. Those providers process relevant data under their own terms and privacy policies. Links to external websites or social networks are also governed by those services' own terms. No advertising, payment, or permanent cloud-file-storage provider is configured in the application code.

Account records are retained while an account remains active. Permanent account deletion removes the account record, linked sign-in methods, sessions, and related authentication records from the application database, subject to any limited retention required by law or maintained temporarily in infrastructure backups. Verification and password-reset records expire and session records are time-limited. The application does not maintain a permanent image library: image data remains in the processing request and response rather than being written to application storage. Browser preference records remain until they expire, are replaced, or are cleared as described in the Cookie Policy. Contact submissions may be retained as reasonably necessary to respond, maintain correspondence, protect the service, or meet legal obligations; no fixed contact-retention period is represented here.

iZip IMG uses reasonable technical safeguards visible in the project, including password hashing, verified-email checks, secure HTTP-only session cookies in production, same-origin mutation checks, database-backed authentication rate limits, upload validation, file-size and pixel limits, request timeouts, no-store image responses, and restricted delivery configuration. No internet service can guarantee absolute security, and this policy does not claim that files are encrypted at rest or protected by controls that have not been verified.

izipimg.com is available internationally. A request may be processed in a country different from the one where you are located, depending on the hosting, network, or configured contact-delivery infrastructure. The project does not identify those providers or processing locations. Where data-transfer rules apply, appropriate protections should be used by the responsible operator and service provider.

iZip IMG is a general-purpose image utility and is not directed to children under 13. We do not knowingly collect personal information from a child under 13. If you believe a child has created an account or otherwise submitted personal information, please contact us so the request can be reviewed and appropriate action can be taken.

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection concerning personal information, and to withdraw consent where processing relies on consent. Signed-in users can update their name or permanently delete their account from Account Settings. You can clear language, theme, and consent records through browser controls and can submit a privacy request through the Contact Us page. Identity or request details may be needed to protect information from unauthorized disclosure.

If the GDPR or UK GDPR applies, processing may rely on steps requested by you, legitimate interests in operating and securing the service, consent for optional technologies, or compliance with legal obligations. Subject to legal limits, you may exercise the rights described above and complain to your local data protection authority. Because no operator legal identity or Data Protection Officer is verified in the project, this policy does not invent one.

California residents may have rights to know, correct, or delete covered personal information and to receive equal service when exercising those rights, subject to exceptions. The current application does not sell personal information, share it for cross-context behavioral advertising, or use sensitive personal information to infer characteristics. A request can be submitted through the privacy contact options below.

For questions about this policy or a privacy-rights request, use the Contact Us page and select the privacy request subject, or email the verified iZip IMG contact address shown below. Do not send an image file unless it is necessary to explain the request.

This policy may be updated when iZip IMG's features, data practices, or legal obligations change. The date at the top will be revised when an update is published. Material changes should be presented clearly before new practices take effect where notice or consent is required.