Privacy Policy
Short version: the images and PDFs you process stay on your device. This page explains the small amount of data the site does handle. Effective October 14, 2026.
Updated
Who is responsible
The data controller for this website is PictureToolbox. Write to privacy@picturetoolbox.com with any question about this policy or your data.
Your files
When you use a tool, your browser reads the file you choose and processes it locally with code that runs on your device. The file is not uploaded to our servers or to any third party, and we cannot see it. Results are created in your browser's memory and saved only when you download them. Closing or reloading the page clears them.
Some tools download code or data files to your browser, for example image codecs. Those downloads never contain your files.
Information we receive
We do not ask you to create an account or fill in a form, so we do not collect your name, email address or other profile data. The items below are what a normal website receives.
- Server and network logs. Our hosting and the Cloudflare network in front of the site process technical data such as your IP address, request time, requested page, browser type and referring page. This is used to deliver the site, prevent abuse and keep it secure. Logs are kept for a limited period.
- Aggregated analytics. We use Cloudflare Web Analytics to count visits, pages, countries and browser types. It does not use cookies or local storage, does not build a profile of you and does not track you across sites. We also use Google Search Console, which reports how the site appears in Google Search and does not collect data from you directly.
- Email. If you write to us, we receive your email address and message. We use them only to reply and to improve the site, and keep them as long as needed to handle your request.
Advertising
We plan to show ads from Google AdSense. Google and its partners may use cookies and similar identifiers to deliver and measure ads, limit how often you see one and prevent fraud. Ads are kept away from the upload and download controls, and they never receive your files.
If you are in the European Economic Area, the United Kingdom or Switzerland, we will show a consent banner from a Google-certified consent management platform. Personalized ads and non-essential cookies are used only if you agree, and you can change your choice at any time through the banner's settings link. Elsewhere, ads may be personalized unless you opt out.
You can manage personalized advertising in Google's Ad Settings at adssettings.google.com, or find opt-out options at aboutads.info and youronlinechoices.eu. To learn how Google uses information from sites that use its services, see policies.google.com/technologies/partner-sites.
Cookies and local storage
The site itself stores one item in your browser's local storage: your light or dark theme choice. It stays on your device and holds no personal data. Cookies are set only by advertising and consent tools, as described above. You can block or delete cookies in your browser settings, and the tools keep working.
Why we process data and how long we keep it
Where the GDPR or UK GDPR applies, our legal bases are legitimate interests (running, securing and improving the site, and measuring it without cookies), consent (personalized ads and non-essential cookies in the EEA, UK and Switzerland) and, for email, our legitimate interest in answering you. We keep data only as long as it is needed for these purposes.
Your rights
Depending on where you live, you may have the right to know what personal data we hold about you, to get a copy, to correct or delete it, to object to or restrict some processing, to withdraw consent at any time, and to complain to your data protection authority. In the EEA and UK these rights come from the GDPR and UK GDPR. In California, the CCPA and CPRA give you the right to know, delete and correct personal information, and to opt out of its sale or sharing.
We do not sell personal information. Advertising partners may collect identifiers as described above, and you can opt out through Google's Ad Settings or the consent controls on the site. To use any right, email privacy@picturetoolbox.com. We will not treat you worse for doing so. We may need to confirm your identity first, and we will answer within the time the law requires.
Children
The site is a general-audience tool and is not directed at children under 13, or under 16 where local law sets that age. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, email privacy@picturetoolbox.com and we will delete it.
International visitors
The site is available worldwide. Cloudflare and Google run global networks, so technical data such as your IP address may be processed in countries other than your own, including the United States. Where required, these providers rely on safeguards such as standard contractual clauses.
Security
The site is served over HTTPS. Because your files never leave your device, they are not exposed to a server breach. No system is perfectly secure, so keep your own devices and browsers up to date.
Governing law
This policy is read together with the data protection laws that apply to you. Nothing here reduces rights you have under those laws.
Changes to this policy
We will update this page if our practices change, for example when advertising goes live, and we will change the effective date at the top.
Contact
Privacy questions and requests: privacy@picturetoolbox.com. General questions: hello@picturetoolbox.com.