CompressTinyImage
100% Private
🔒 100% Client-Side Architecture • Zero Data Retention

Privacy Policy & Security Guarantee

Effective Date: November 2026 • Multi-Page Application (MPA) Architecture

Summary: Privacy by Design

CompressTinyImage is engineered from the ground up to respect your digital privacy. Unlike traditional image converters that upload your sensitive photos, IDs, or documents to remote cloud storage, CompressTinyImage performs all processing directly inside your web browser. Your files never touch our servers, are never recorded in databases, and cannot be viewed by anyone other than you.

1 The Core Principle: Zero Server Uploads

When you use CompressTinyImage—whether you are compressing a personal portrait, resizing an official passport photo, reducing file size to exact KB thresholds, or converting between WebP, PNG, JPG, and AVIF formats—your files are never uploaded to any remote server or third-party cloud infrastructure.

Traditional online image compressors rely on server-side processing queues (e.g., uploading files to AWS S3, Azure Blob, or temporary backend storage). CompressTinyImage eliminates this security vector completely by executing the entire image compression pipeline locally on your device's CPU and GPU via the browser's native JavaScript and HTML5 Canvas engines.

2 Technical Architecture & In-Browser Execution

Here is precisely how data flows when you compress or convert an image on our platform:

  • ✓
    Local Memory Loading (HTML5 File API): When you select or drag-and-drop an image, your browser creates an in-memory binary object (Blob) directly from your local file system into your device RAM.
  • ✓
    Off-Thread Decoding & Canvas Rendering: Image decoding, aspect ratio preservation, color quantization, and binary quality search run using HTML5 Canvas and OffscreenCanvas in worker threads on your device.
  • ✓
    Local Blob Output & ZIP Packaging: Resulting optimized images and multi-file ZIP bundles (generated via JSZip) are assigned temporary client-side blob: URLs.
  • ✓
    Instant Memory Garbage Collection: When you remove a card, navigate away, or close your browser tab, the allocated Object URLs are revoked and browser garbage collection flushes all memory buffers instantly.

3 How You Can Verify Our Zero-Upload Guarantee

We believe privacy should be verifiable, not merely promised. You can audit our privacy guarantee yourself at any time:

  1. Open your browser Developer Tools (press F12 or Ctrl+Shift+I / Cmd+Option+I).
  2. Switch to the Network tab and set the filter to Fetch/XHR.
  3. Drop a large image into any tool on CompressTinyImage and watch the network logs.
  4. Notice that zero HTTP requests carrying your image bytes are initiated.
  5. Optional offline test: Turn off your computer's Wi-Fi or enable Airplane mode after loading the site. The image compression and conversion tools continue to function 100% offline.

4 Information We Do NOT Collect

We deliberately do NOT collect, harvest, monetize, or store:

  • Uploaded image files, photos, graphics, or document scans
  • EXIF metadata, GPS geotags, camera serial numbers, or timestamps
  • Biometric data, facial geometries, or identity signatures
  • Original file names, directory paths, or file metadata
  • User passwords, account logins, or credit card information

5 Cookies and Tracking Technologies

CompressTinyImage does NOT use third-party advertising tracking cookies, cross-site trackers, or marketing pixels.

We may utilize standard browser caching, Service Workers, or LocalStorage solely to enable fast offline Progressive Web App (PWA) operation and remember user interface preferences (such as your chosen compression codec or target size preset). No personal identity is attached to these local tokens.

6 GDPR, CCPA/CPRA & International Compliance

Because CompressTinyImage does not store or process personal data on remote servers, we fulfill data protection regulations worldwide by architectural design:

🇪🇺 GDPR (EU General Data Protection Regulation) Satisfies strict data minimization (Article 5(1)(c)) and privacy-by-design (Article 25). No international data transfers occur because data remains on your local machine.
🇺🇸 CCPA / CPRA (California Consumer Privacy Act) We do not sell, share, or monetize consumer personal information. No consumer data profiles are ever built or transmitted to third parties.

7 Third-Party Hosting & Content Delivery

Our static website assets (HTML, CSS, JavaScript, icons) are hosted and delivered via globally distributed edge networks (such as Cloudflare or Vercel). These providers may log standard web server access logs (such as IP address, user-agent, and HTTP status codes) strictly for security and DDoS mitigation. These edge logs never contain your image data because your files are never transmitted over HTTP.

8 Children's Privacy Protection (COPPA)

CompressTinyImage is a general-purpose digital utility safe for all age groups. We do not knowingly solicit or collect personally identifiable information from children under the age of 13 in compliance with the Children's Online Privacy Protection Act (COPPA).

9 Contact Our Privacy Team

If you have any questions or inquiries regarding this Privacy Policy or our client-side security architecture, please contact us:

CompressTinyImage Privacy & Security Team

Email: privacy@compresstinyimage.com

Website: https://compresstinyimage.com

Contact Form: compresstinyimage.com/contact

Frequently Asked Questions about our Privacy Policy

Clear answers about in-browser data processing and verified security.

Are my uploaded photos or documents sent to your servers?
No. CompressTinyImage is built with a 100% client-side architecture. All image reading, canvas rendering, compression, and file conversions occur directly within your device's browser memory (RAM). Zero bytes of your photos or documents are ever uploaded to any remote server.
How can I verify that my images are not uploaded?
You can open your browser Developer Tools (F12), navigate to the Network tab, and perform any compression or conversion. You will observe zero HTTP POST or PUT requests containing image payloads. You can even disconnect your internet entirely after loading the page, and the tools continue working.
Do you store or track my personal data, browsing history, or cookies?
No. CompressTinyImage does not use tracking cookies, advertising pixels, or user fingerprinting. We do not require accounts, logins, or email registrations.
Is CompressTinyImage compliant with GDPR and CCPA?
Yes. By designing our tools to execute entirely client-side with zero data collection, data storage, or server transmission, CompressTinyImage intrinsically satisfies the strict data minimization and privacy-by-design standards of GDPR, CCPA/CPRA, and global privacy frameworks.
Does CompressTinyImage retain EXIF metadata or camera geotags?
No. When images are processed in HTML5 Canvas, unneeded EXIF headers, camera serial numbers, and sensitive GPS geolocation coordinates are stripped from the output file, protecting your personal privacy.
How does local browser memory garbage collection protect my privacy?
As soon as you remove an image card, download your files, or close your browser tab, URL.revokeObjectURL() is called and device RAM buffers are instantly freed. No residual data persists on your disk.
Looking for more information? Terms & Conditions • About Us • Contact Us
Go to Image Compressor →