Privacy Policy

Overview

This Privacy Policy describes how ImageResizer ("we", "us", or "our") collects, uses, and protects information when you use our website at imageresizer.bd. By using ImageResizer, you agree to the practices described in this policy.

We are committed to protecting your privacy and handling your data with transparency. This policy is written in plain language — not legal jargon — because we believe you deserve to understand exactly how your data is handled.

Data We Collect

Information you provide directly

• Account data: When you create an account, we collect your email address, display name, and encrypted password.
• Payment data: If you subscribe to Pro or Business, payment details are processed by Stripe. We never store your card numbers.
• Support messages: When you contact us, we collect your name, email, and the content of your message.

Information collected automatically

• Usage analytics: We collect anonymised data about which tools you use, pages you visit, and general usage patterns via Google Analytics.
• Technical data: Browser type, operating system, screen resolution, and approximate geographic location (country/region level only — never precise GPS).
• Log data: Server logs include IP addresses, access times, and referring URLs. These are retained for 30 days for security purposes only.

Your Images

When you upload an image to ImageResizer, the file is loaded into your browser's memory using the JavaScript File API. All processing — including resizing, cropping, compressing, and format conversion — is performed using the HTML5 Canvas API directly on your device.

The resulting output file is generated in your browser and downloaded directly to your device. At no point does your image data pass through our servers, be stored in any database, or be accessible to us or any third party.

This design is intentional. It means ImageResizer works even when you're offline (after the page loads), and it means your photos — whether personal, medical, confidential, or professional — remain completely private.

Cookies & Tracking

We use a minimal set of cookies that are necessary for the site to function, plus optional analytics cookies:

Essential cookies

• Session cookie: Keeps you logged in during your session.
• Preference cookie: Remembers your chosen language and theme settings.

Analytics cookies (optional)

• Google Analytics (_ga, _gid): Anonymised usage data to help us understand which tools are most useful. IP addresses are anonymised before collection. You can opt out via your browser settings or the Google Analytics opt-out extension.

We do not use advertising cookies, tracking pixels, or any third-party marketing trackers. You can disable non-essential cookies at any time in your browser settings without affecting core functionality.

Third Parties

We share minimal data with a small number of carefully selected service providers:

• Stripe: Payment processing for Pro and Business subscriptions. Stripe is PCI DSS Level 1 certified. We never store payment card data.
• Google Analytics: Anonymised usage analytics. Data is anonymised before transmission.
• Cloudflare: Content delivery, DDoS protection, and DNS. Cloudflare processes request metadata (IP, headers) for security purposes under their own privacy policy.

We do not sell your personal data. We do not share your data with advertisers, data brokers, or any other third parties beyond those listed above. We will never sell or rent your email address.

Payments

All payment processing is handled by Stripe, Inc. When you subscribe to a paid plan, you are entering a payment relationship directly with Stripe through our interface.

We receive from Stripe only: your subscription status, the last 4 digits of your card (for display purposes), your billing email, and your plan tier. We never receive or store your full card number, CVV, or banking details.

Stripe's privacy policy is available at stripe.com/privacy. Stripe is certified to PCI Service Provider Level 1, the most stringent level of certification available in the payments industry.

Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of all personal data we hold about you.
• Correction: Request correction of any inaccurate data.
• Deletion: Request deletion of your account and all associated data. We will process deletion requests within 30 days.
• Portability: Request an export of your data in a machine-readable format (JSON or CSV).
• Objection: Object to processing of your data for analytics purposes at any time.
• Withdrawal: Withdraw consent for optional data processing (such as analytics cookies) at any time.

If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under GDPR and UK GDPR. To exercise any of these rights, please contact us at privacy@imageresizer.bd.

Children's Privacy

ImageResizer is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children under these ages.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@imageresizer.bd and we will delete the information promptly.

Policy Changes

We may update this Privacy Policy from time to time. When we make significant changes, we will notify registered users by email at least 14 days before the changes take effect, and we will update the "Last updated" date at the top of this page.

Continued use of ImageResizer after the effective date of any changes constitutes your acceptance of the updated policy. If you do not agree with the changes, you may delete your account before the effective date.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@imageresizer.bd
• Contact form: imageresizer.bd/contact
• Response time: We aim to respond to all privacy inquiries within 48 hours.

For GDPR-related requests, we aim to respond within 30 days as required by law.