Privacy Policy
October 18, 2026
CompressPhoto (compressphoto.org) is a free toolkit for image and document processing. This policy explains what data we receive and what happens to it.
1. File processing
Most tools (compress, convert, resize, crop, rotate, watermark, background removal, metadata removal, OCR, presets, video trimming, video to MP3) process your file entirely in your browser. The file is never uploaded to our server and we never have access to it.
Exception 1: Word ↔ PDF conversion, video compression and video-to-MP4 conversion are not local. The file is uploaded directly from your browser to CloudConvert, our conversion provider. Files are automatically deleted from CloudConvert's servers shortly after processing, per CloudConvert's standard retention settings. We don't keep copies and don't inspect their content.
Exception 2: temporary links. Only if you click "2-hour link" is the processed file uploaded to Cloudflare R2 storage, where anyone with the link can download it. The link stops working exactly 2 hours later; the file is deleted from storage automatically at the next cleanup, within 24 hours at the latest. We don't inspect these files unless we receive a report about unlawful content.
2. Accounts
If you create an account (to get a higher daily Word/PDF conversion limit), we store your email and account status via Supabase, our authentication and database provider. We never see your password in plain text. You can request account deletion by emailing us (see Contact below).
3. Analytics (consent-gated)
We use Google Analytics to understand which tools are popular. Analytics only loads after you accept our cookie consent banner; without consent, no request to Google Analytics is ever sent. We never send file names or file content to analytics. You can withdraw consent at any time via the "Cookie settings" link in the footer.
4. Limits & abuse prevention
To keep the free service available to everyone, we count daily conversions (Word/PDF, video) and temporary links using a technical identifier (a hashed IP address, or your account ID if you're signed in). We don't use this identifier for profiling — only for the "used today" counters.
5. Third parties that may receive data
- CloudConvert — Word↔PDF and video conversion: the file itself, temporarily.
- Cloudflare (R2) — temporary links: the file itself, accessible for up to 2 hours (deleted within 24 hours at the latest), only if you create a link.
- Supabase — accounts & authentication: email, hashed password.
- Vercel — site hosting: standard server logs (IP, user agent).
- Google Analytics — usage statistics, consent-gated: anonymized session data.
6. Your rights
You can ask us to delete your account and data, withdraw analytics consent at any time, and ask what data we hold about you — see Contact below.
7. Contact
Privacy questions: petrovich4114@gmail.com