Privacy Policy
Introduction
ImageAndPDF.com ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we handle your data when you use our services.
Data Collection
We collect minimal data to provide our services:
- Anonymous usage statistics (page views, tool usage)
- Browser type and operating system (for compatibility)
- IP address (temporarily, for security purposes)
Contact & Feedback Form Submissions
When you contact us through our contact or feedback forms, we collect the information you submit, such as your name, email address, subject, and message. We use this information only to respond to your request, improve the website, and manage support or feedback. Submissions may be stored securely in our internal database. We do not sell this information.
File Processing
Most of our tools process files directly in your browser using JavaScript. This means:
- Your files never leave your device
- We cannot access or view your files
- Processing happens entirely on your computer
For tools that require server-side processing:
- Files are temporarily uploaded to our Hetzner backend over HTTPS
- Files are automatically deleted within 1 hour of processing
- We do not store, analyze, or share your files
- Processing runs in isolated, rate-limited environments
Cookies
We use cookies to enhance your experience and support our free service:
- Essential Cookies: Remember your preferences and settings across sessions
- Analytics Cookies: Help us understand how visitors use our site (via Google Analytics) to improve functionality
- Functional Cookies: Help us remember your tool preferences and recently used tools for a smoother experience.
Managing Cookies: You can disable cookies in your browser settings, but this may affect site functionality.
Third-Party Services / Subprocessors
The following list is generated from our vendor register (lib/manifest/vendors.ts) and shows every subprocessor currently active in production, along with the data we share, where they process it, and the legal basis under GDPR. Dormant integrations (SDKs present but not initialized) are excluded.
Google Analytics 4
activeAggregate anonymous usage analytics (page views, time on page, source/medium).
- Data shared:
- page URL, referrer, browser type, OS, screen size, country (from IP), session ID cookie
- Location:
- United States (Mountain View, CA) with regional EU edge proxies.
- Legal basis:
- legitimate interest
- Privacy policy:
- https://policies.google.com/privacy ↗
Microsoft Clarity
activeHeatmaps and session recordings (masked) for UX debugging.
- Data shared:
- page URL, click coordinates, scroll position, browser type, masked DOM (PII fields auto-redacted)
- Location:
- United States and ROW (Microsoft Azure regions).
- Legal basis:
- consent
- Privacy policy:
- https://privacy.microsoft.com/en-us/privacystatement ↗
Hetzner Cloud
activeBackend server processing: PDF compression, OCR, HEIC conversion, Office-to-PDF, image compression, AI inference (background removal, upscaler).
- Data shared:
- uploaded file contents during processing only, file size, IP address (for rate limiting)
- Location:
- European Union (Falkenstein, Germany) — GDPR jurisdiction.
- Legal basis:
- contract
- Privacy policy:
- https://www.hetzner.com/legal/privacy-policy ↗
Vercel Edge Network
activeFrontend static asset delivery (HTML, JS, CSS, images) via CDN.
- Data shared:
- page URL, IP address (for delivery routing), user agent
- Location:
- Global edge network (Vercel POPs in 30+ regions).
- Legal basis:
- contract
- Privacy policy:
- https://vercel.com/legal/privacy-policy ↗
Namecheap
activeDomain registration (imageandpdf.com), DNS hosting, free email forwarding (support@imageandpdf.com → personal Gmail).
- Data shared:
- domain WHOIS contact (registrant), email message envelope + body when forwarded
- Location:
- United States (Phoenix, AZ).
- Legal basis:
- contract
- Privacy policy:
- https://www.namecheap.com/legal/general/privacy-policy ↗
Adding or removing a vendor in production triggers an update to this page on the same deploy (see /security for the deploy gate).
Processing Mode Per Tool
We have two classes of tools, clearly labelled on every tool page:
- Browser-only tools (most image editors, the PDF editor, meme generator, JPG→PDF converter, in-browser AI like remove-background and upscaler): the file is read into your browser and processed entirely on your device. It is NEVER transmitted to our servers. Closing the tab destroys the working copy.
- Server-processed tools (PDF compression, OCR, organize-pdf, HEIC conversion, Office-format conversions, bank-statement parsing, AI summarization): the file is uploaded to our Hetzner Cloud backend in Germany over HTTPS, processed in an isolated rate-limited environment, the result is returned, and BOTH the source file and any intermediate output are deleted within 1 hour. We do not log file contents.
The badge above the upload area of every tool reflects which mode applies (e.g., "Files never uploaded" vs "Deleted in 1h"), derived from the same manifest that drives this page.
Financial Documents
For tools such as Bank Statement to CSV, files are processed solely for data extraction and conversion purposes. ImageAndPDF.com does not generate, modify, alter, or store financial records.
Google AdSense & Advertising
We may use Google AdSense to display advertisements. Google and its partners may use cookies to personalize advertising. Users can manage ad personalization settings through Google Ad Settings.
- Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website and other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to this site and/or other sites on the Internet.
- Users may opt out of personalized advertising by visiting Google Ad Settings, or opt out of a third-party vendor's use of cookies for personalized advertising at www.aboutads.info/choices.
See our full Cookie Policy for details on the cookies we and our partners use.
Data Security
We implement industry-standard security measures to protect your data:
- HTTPS encryption for all connections
- Secure file handling and deletion
- Regular security audits
- Access controls and monitoring
Your Rights
You have the right to:
- Access your data
- Request data deletion
- Opt-out of analytics
- Contact us with privacy concerns
Contact Us
For privacy or data-deletion requests, contact support@imageandpdf.com. We respond within 30 days.
Document revisions
Effective date: 2026-06-26
Page owner: Kummari Achyuth (support@imageandpdf.com)
| Date | Change |
|---|---|
| 2026-06-26 | Fixed hosting claim (Render/Vercel → Hetzner backend + Vercel edge). Unified retention to 1 hour. |
| 2026-06-26 | Switched contact email to support@imageandpdf.com. |