Privacy Policy
The important part in one line: your images are processed inside your browser and are never uploaded to us.
Last updated 31 July 2026
Your images
Images, photos and PDFs you use with the tools on this site are never uploaded. They are opened and processed by your own web browser, on your own device, and are never transmitted to us or to anyone else.
This is not a promise about how carefully we handle your files. It is a statement that we never receive them. There is no server-side image processing on this site, so there is nothing to store, cache, or log.
You can verify this rather than trust it
Open your browser’s developer tools, switch to the Network tab, and use any tool here. The page loads, and then nothing further is sent. That is a property of how the site is built, not a policy we could quietly change without it being visible.
The same applies to what is inside your files. When the EXIF viewer shows you the GPS coordinates stored in a photo, that reading happened on your machine. We never see the photo, and we never see the location.
What we collect
Nothing that identifies you. There is no sign-in, and nothing that follows you between visits or across other websites.
Visitor statistics
We use Cloudflare Web Analytics to see which pages are being used and which tools people find useful. It is deliberately the least invasive option available:
- No cookies, and nothing stored on your device.
- No fingerprinting — it does not attempt to identify your browser or device.
- No cross-site tracking. It cannot see anything you do anywhere else, and is not used for advertising.
- Figures are aggregated: page views, referring sites, country, and how quickly pages load. Not people.
That is why there is no cookie banner on this site. Analytics that needs one is analytics that is tracking you, and we would rather have less data than put a consent dialog between you and a tool you came here to use for ten seconds.
Server logs
The pages themselves are served by our hosting provider, which — like essentially every web host — records standard technical request information such as IP address, browser type, and which page was requested. We do not use this to build a profile of you and do not combine it with anything else. It does not include your images, because your images are never sent.
Optional accounts
We plan to add an optional account so people can collect points and appear on a leaderboard. It is a bit of fun, and it is entirely separate from using the tools.
Using a tool will never require an account
That is a deliberate line rather than a temporary state. Every tool on this site works fully without signing in, and will continue to.
When accounts exist, an account will involve:
- An email address, used to sign in and reset your password.
- A password, stored only as a secure hash — never in readable form.
- A display name you choose, shown publicly on the leaderboard. Your email is never shown there.
- A count of tools you have used, which is what the points are.
Your images remain outside all of this. The account records a number, not your files. Marketing email would be strictly opt-in, with an unchecked box and a working unsubscribe link in every message.
This section describes what is planned. This page will be updated with the specifics before any of it goes live, and the date at the top will tell you when that happened.
Cookies
This site currently sets no cookies and does not use local storage to track you between visits. Our analytics is cookieless by design, which is why you have not been asked to accept anything.
Once accounts exist, signing in will set a session cookie — that is simply how staying logged in works. It is set only if you choose to create an account and sign in. Advertising will also introduce third-party cookies, covered below.
Advertising
This site is funded by advertising, though none is running yet. When it launches it will be Google AdSense.
Advertising networks typically use cookies and similar technologies to measure and select adverts, and that is outside our control. Before ads go live, this page will be updated with the specific disclosures required and with proper consent handling for visitors in the EU and UK.
What will not change: adverts will be placed where they cannot be mistaken for a download or upload button, and your images will still never be uploaded.
Your rights
Under the UK GDPR, EU GDPR, CCPA and similar laws you have rights to access, correct, export and delete personal data held about you.
Today those rights have very little to act on, because we hold no personal data. Once accounts exist you will be able to see everything associated with yours, and delete it — which removes the account, the email address and the points along with it.
Your images are not covered by any of this, for the simple reason that we never had them.
Children
This site is not directed at children. We do not knowingly collect personal information from anyone under 13.
Links to other sites
Some tools link out to third parties — the EXIF viewer, for instance, offers a link to view a photo’s coordinates on OpenStreetMap. If you follow one, that site’s own privacy policy applies. We only send you there if you click.
Contact
Questions about this policy, or any request relating to your data, can go to hello@freeimagelab.com.
Free Image Lab is operated by Eric Daft of Boundliss Media.
Frequently asked questions
- Are my images uploaded to your servers?
- No. Every tool on this site processes your image inside your own browser using the Canvas API. There is no upload step and no server-side image processing, so we never receive your files at any point. You can verify this by opening your browser's developer tools, switching to the Network tab, and using any tool — your image is not transmitted anywhere.
- How can I be sure the images are not being sent somewhere?
- Check it yourself rather than trusting the claim. Open developer tools, go to the Network tab, drop an image into any tool, and watch the requests. The page loads, and then nothing further is sent. This is a structural property of how the site is built, not a policy we could quietly change without you being able to notice.
- Do I have to create an account?
- No. Using the tools never requires an account and never will. We plan to add an optional sign-in for a points leaderboard, which is entirely separate from using the tools — you can ignore it completely and everything still works.
- What would an account collect?
- An email address, a password stored as a secure hash, a display name you choose for the leaderboard, and a count of tools you have used. Your images would still never be uploaded — the account tracks points, not files. Marketing email would be opt-in with an unchecked box, never opt-out.
- Do you use cookies?
- No. Our analytics is cookieless, which is why this site has no cookie banner. If you create an account once that feature exists, a session cookie would be set so you stay signed in — that is a necessary part of being logged in anywhere. Advertising will introduce third-party cookies when it launches, and this page will be updated before it does.
- What analytics do you use?
- Cloudflare Web Analytics, which sets no cookies, does not fingerprint your browser, and cannot see anything you do on other websites. It tells us which pages get used and how fast they load, in aggregate. It is not used for advertising and it never sees your images.
- Do you sell any data?
- No. The site is funded by advertising placed on pages, not by selling information about visitors.