Privacy Policy

This policy explains what information JFIF.IO (“we”, “us”) processes when you use this website, why, and what choices you have. The operator of this website is responsible for the processing described here and can be reached through the contact page.

Your images

In-browser processing. The converter and image tools process your images locally, in your web browser. For these standard operations, your images are not uploaded to us, and we cannot see them.

Optional server processing. If your browser cannot decode a specific file, the converter may offer server processing for that file. It is only used if you click to allow it. The file is transmitted over HTTPS, processed in memory, returned to you and discarded. It is not written to disk, stored, logged or used for any other purpose. File names are not transmitted.

Anonymous usage statistics

To understand which tools and formats are used, the site sends anonymous events to our own server — for example “a PNG was converted to WebP”, or the numeric size of input and output. These events contain no file names, no image content, no cookies and no identifiers. They are added to daily totals; individual events are not stored. Your IP address is used only momentarily to prevent abuse (rate limiting) and is not stored with the statistics.

If a conversion fails, a technical error code (for example “decode_failed”) may be recorded to help us fix problems. Error records are deleted after 30 days.

Contact form

When you send us a message, we store your name, email address, subject, message, the language of the site and a one-way keyed hash of your IP address (used only to limit abuse). We use this information solely to respond to you. Messages are kept until we have dealt with them and then deleted.

Cookies and local storage

We use a small number of strictly necessary cookies and local storage entries (your language, theme and privacy choices). Optional cookies from Google Analytics and Google AdSense are only set if you consent, where consent is required. Details are in our Cookie Policy.

Google Analytics (optional)

If enabled by the site operator and accepted by you, Google Analytics 4 collects information about how the site is used (pages viewed, approximate location derived from your IP address, device and browser type, and the anonymous events described above). Google acts as our processor. You can withdraw consent at any time via “Cookie settings” in the footer.

Google AdSense (optional)

If enabled and accepted, Google AdSense may use cookies to show and measure advertising, which can be personalised. Google’s use of data is described at policies.google.com/technologies/ads. You can withdraw consent at any time via “Cookie settings”.

Server logs

Our hosting infrastructure may keep standard technical logs (such as IP address, requested URL, time and browser type) for a short period to operate the service securely. These logs never contain image content.

Legal bases

Where the GDPR applies, we process data on the basis of our legitimate interests in operating a secure, reliable service (server logs, abuse prevention, anonymous statistics), on the basis of your request (contact form, optional server processing), and on your consent (Google Analytics and AdSense).

Your rights

Depending on where you live, you may have the right to access, correct, delete or restrict the processing of your personal data, to object to processing, to data portability, and to lodge a complaint with a supervisory authority. To exercise these rights, contact us via the contact page.

Children

The site is not directed at children under 16, and we do not knowingly collect their personal data.

Changes

We will update this page if our practices change. The date at the top shows when it was last updated.