Who We Are
We are the operators of the Instagram Image Crop & Compression Tool, a free online image optimization service. Our tool helps users resize, crop, and compress images for Instagram without uploading files to our servers.
What Data We Collect
We collect different types of data depending on how you use our service and your consent preferences:
Image Data (100% Local Processing)
- Your uploaded images: Processed entirely on your device - never uploaded to our servers
- Image metadata: Not accessed or stored by our service
- Processing preferences: Quality settings and format choices (stored locally only)
Technical Data (Automatic Collection)
- IP address: For security, fraud prevention, and geographic location
- Browser information: Type, version, and capabilities for compatibility
- Device data: Screen size, operating system for responsive design
- Usage data: Pages visited, time spent, clicks and interactions
- Performance data: Load times, errors, and technical diagnostics
Cookies and Tracking Technologies
- Essential cookies: For basic website functionality
- Analytics cookies: To understand user behavior (with consent)
- Advertising cookies: For personalized ads (with consent)
- Local storage: Your preferences and consent choices
Purposes of Data Processing
We process your data for the following purposes:
- Service provision: To operate the image processing tool
- Performance optimization: To improve loading times and functionality
- Analytics: To understand usage patterns and improve our service
- Advertising: To display relevant ads that support our free service
- Security: To prevent fraud, abuse, and technical issues
- Legal compliance: To meet our legal obligations
Third-Party Data Sharing
We share data with the following categories of third parties:
Advertising Partners
- Google AdSense: For displaying ads (with consent for personalized ads)
- Other ad networks: May be added in the future (always with consent)
- Data shared: IP address, device info, browsing behavior, ad interaction data
Analytics Providers
- Google Analytics: For website usage statistics
- Data shared: Anonymized usage data, page views, user flows
Technical Service Providers
- Content Delivery Networks (CDNs): For faster content delivery
- Hosting providers: For website infrastructure
- Security services: For DDoS protection and threat detection
Legal Basis for Processing
We process your data based on the following legal grounds:
- Consent: For personalized advertising, analytics, and non-essential cookies
- Legitimate interest: For service operation, security, and non-personalized advertising
- Legal obligation: For compliance with applicable laws
- Vital interests: For preventing fraud and ensuring security
Your Rights Under GDPR
As a data subject, you have the following rights:
- Right of access: Request a copy of your personal data
- Right to rectification: Correct inaccurate personal data
- Right to erasure ("right to be forgotten"): Request deletion of your data
- Right to restrict processing: Limit how we use your data
- Right to data portability: Receive your data in a portable format
- Right to object: Stop processing for direct marketing or legitimate interests
- Right to withdraw consent: Change your mind about previously given consent
- Right to lodge a complaint: Contact your data protection authority
To exercise any of these rights, contact us at [email protected]
Cookie & Storage Policy
We use various types of cookies and storage technologies:
| Cookie Type | Purpose | Duration | Essential? |
|---|---|---|---|
| Functional | Basic website operation, user preferences | Session / 1 year | Yes |
| Consent Management | Store your cookie consent choices | 1 year | Yes |
| Analytics | Google Analytics for usage statistics | 2 years | No (requires consent) |
| Advertising | Google AdSense for personalized ads | Up to 2 years | No (requires consent) |
| Performance | Load balancing, error tracking | Session | Yes |
Data Retention Policy
- Image data: Never stored on our servers (remains on your device only)
- Consent records: Kept for 3 years to demonstrate compliance
- Analytics data: Automatically deleted after 26 months (Google Analytics default)
- Log files: Deleted after 90 days unless needed for security investigations
- Cookie data: Expires according to cookie settings (see table above)
Data Security
We implement appropriate technical and organizational measures to protect your data:
- Encryption: All data transmission uses HTTPS/TLS encryption
- Access controls: Limited access to personal data on a need-to-know basis
- Regular audits: Security assessments and vulnerability testing
- Data minimization: We only collect data necessary for our services
- Client-side processing: Your images never leave your device
International Data Transfers
Some of our service providers may process your data outside the EEA:
- Google (AdSense, Analytics): Processes data globally with adequate safeguards
- Safeguards: EU-US Data Privacy Framework, Standard Contractual Clauses
- Your control: You can opt out of data transfers by rejecting non-essential cookies
Consent & Ad Personalization
For EEA and UK visitors: We use a Google-certified Consent Management Platform (CMP) that complies with Google's EU User Consent Policy. You can:
- Choose to accept or reject personalized advertising
- Opt for non-personalized ads if you reject consent
- Change your mind at any time using the settings below
- Withdraw consent without affecting the lawfulness of prior processing
Children's Privacy
Our service is not intended for children under 16 years old. We do not knowingly collect personal data from children. If you are a parent and believe your child has provided us with personal data, please contact us immediately.
Changes to This Policy
We may update this privacy policy to reflect changes in our practices or legal requirements. We will:
- Post the updated policy on this page with a new "Last Updated" date
- Notify you of material changes via email or prominent website notice
- Obtain new consent if required by law
- Provide 30 days notice for significant changes affecting your rights
Contact Us & Data Protection Officer
For any questions about this privacy policy or to exercise your rights:
General Privacy Questions: [email protected]
Data Protection Officer: [email protected]
Data Subject Requests: [email protected]
Supervisory Authority: You can lodge complaints with your local data protection authority
Response Time: We respond to all inquiries within 72 hours
Last Updated: January 13, 2026
Policy Version: 2.0 (GDPR Compliant)