Skip to main content
image&pdf.com

Privacy Policy

Introduction

ImageAndPDF.com ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we handle your data when you use our services.

Data Collection

We collect minimal data to provide our services:

  • Anonymous usage statistics (page views, tool usage)
  • Browser type and operating system (for compatibility)
  • IP address (temporarily, for security purposes)

Contact & Feedback Form Submissions

When you contact us through our contact or feedback forms, we collect the information you submit, such as your name, email address, subject, and message. We use this information only to respond to your request, improve the website, and manage support or feedback. Submissions may be stored securely in our internal database. We do not sell this information.

File Processing

Most of our tools process files directly in your browser using JavaScript. This means:

  • Your files never leave your device
  • We cannot access or view your files
  • Processing happens entirely on your computer

For tools that require server-side processing:

  • Files are temporarily uploaded to our Hetzner backend over HTTPS
  • Files are automatically deleted within 1 hour of processing
  • We do not store, analyze, or share your files
  • Processing runs in isolated, rate-limited environments

Cookies

We use cookies to enhance your experience and support our free service:

  • Essential Cookies: Remember your preferences and settings across sessions
  • Analytics Cookies: Help us understand how visitors use our site (via Google Analytics) to improve functionality
  • Functional Cookies: Help us remember your tool preferences and recently used tools for a smoother experience.

Managing Cookies: You can disable cookies in your browser settings, but this may affect site functionality.

Third-Party Services / Subprocessors

The following list is generated from our vendor register (lib/manifest/vendors.ts) and shows every subprocessor currently active in production, along with the data we share, where they process it, and the legal basis under GDPR. Dormant integrations (SDKs present but not initialized) are excluded.

Google Analytics 4

active

Aggregate anonymous usage analytics (page views, time on page, source/medium).

Data shared:
page URL, referrer, browser type, OS, screen size, country (from IP), session ID cookie
Location:
United States (Mountain View, CA) with regional EU edge proxies.
Legal basis:
legitimate interest
Privacy policy:
https://policies.google.com/privacy

Microsoft Clarity

active

Heatmaps and session recordings (masked) for UX debugging.

Data shared:
page URL, click coordinates, scroll position, browser type, masked DOM (PII fields auto-redacted)
Location:
United States and ROW (Microsoft Azure regions).
Legal basis:
consent
Privacy policy:
https://privacy.microsoft.com/en-us/privacystatement

Hetzner Cloud

active

Backend server processing: PDF compression, OCR, HEIC conversion, Office-to-PDF, image compression, AI inference (background removal, upscaler).

Data shared:
uploaded file contents during processing only, file size, IP address (for rate limiting)
Location:
European Union (Falkenstein, Germany) — GDPR jurisdiction.
Legal basis:
contract
Privacy policy:
https://www.hetzner.com/legal/privacy-policy

Vercel Edge Network

active

Frontend static asset delivery (HTML, JS, CSS, images) via CDN.

Data shared:
page URL, IP address (for delivery routing), user agent
Location:
Global edge network (Vercel POPs in 30+ regions).
Legal basis:
contract
Privacy policy:
https://vercel.com/legal/privacy-policy

Namecheap

active

Domain registration (imageandpdf.com), DNS hosting, free email forwarding (support@imageandpdf.com → personal Gmail).

Data shared:
domain WHOIS contact (registrant), email message envelope + body when forwarded
Location:
United States (Phoenix, AZ).
Legal basis:
contract
Privacy policy:
https://www.namecheap.com/legal/general/privacy-policy

Adding or removing a vendor in production triggers an update to this page on the same deploy (see /security for the deploy gate).

Processing Mode Per Tool

We have two classes of tools, clearly labelled on every tool page:

  • Browser-only tools (most image editors, the PDF editor, meme generator, JPG→PDF converter, in-browser AI like remove-background and upscaler): the file is read into your browser and processed entirely on your device. It is NEVER transmitted to our servers. Closing the tab destroys the working copy.
  • Server-processed tools (PDF compression, OCR, organize-pdf, HEIC conversion, Office-format conversions, bank-statement parsing, AI summarization): the file is uploaded to our Hetzner Cloud backend in Germany over HTTPS, processed in an isolated rate-limited environment, the result is returned, and BOTH the source file and any intermediate output are deleted within 1 hour. We do not log file contents.

The badge above the upload area of every tool reflects which mode applies (e.g., "Files never uploaded" vs "Deleted in 1h"), derived from the same manifest that drives this page.

Financial Documents

For tools such as Bank Statement to CSV, files are processed solely for data extraction and conversion purposes. ImageAndPDF.com does not generate, modify, alter, or store financial records.

Google AdSense & Advertising

We may use Google AdSense to display advertisements. Google and its partners may use cookies to personalize advertising. Users can manage ad personalization settings through Google Ad Settings.

  • Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website and other websites.
  • Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to this site and/or other sites on the Internet.
  • Users may opt out of personalized advertising by visiting Google Ad Settings, or opt out of a third-party vendor's use of cookies for personalized advertising at www.aboutads.info/choices.

See our full Cookie Policy for details on the cookies we and our partners use.

Data Security

We implement industry-standard security measures to protect your data:

  • HTTPS encryption for all connections
  • Secure file handling and deletion
  • Regular security audits
  • Access controls and monitoring

Your Rights

You have the right to:

  • Access your data
  • Request data deletion
  • Opt-out of analytics
  • Contact us with privacy concerns

Contact Us

For privacy or data-deletion requests, contact support@imageandpdf.com. We respond within 30 days.

Document revisions

Effective date: 2026-06-26

Page owner: Kummari Achyuth (support@imageandpdf.com)

DateChange
2026-06-26Fixed hosting claim (Render/Vercel → Hetzner backend + Vercel edge). Unified retention to 1 hour.
2026-06-26Switched contact email to support@imageandpdf.com.