1. Overview
ImageForge provides online image conversion, compression, resizing, cropping, watermarking, optimization, and related tools. We process only the information required to operate these services, secure the application, respond to support requests, and maintain reliable performance.
2. Uploaded and processed images
Images are uploaded to private application storage so the requested processing job can run. Original and processed files are not stored in the public web directory.
- Files are associated with the signed-in account or the current guest session.
- Preview and download requests use temporary signed URLs and ownership checks.
- Uploaded and generated files expire automatically according to the configured retention period.
- Image metadata may be removed when the selected option and output encoder support it.
Do not upload files that you are not authorized to process or content that is unlawful, harmful, or violates another person’s rights.
3. Account information
When you create an account, we store the name, email address, securely hashed password, verification status, account role, and basic login-security information needed to provide and protect the account.
Passwords are never stored in plain text. You are responsible for keeping your credentials confidential and using a strong, unique password.
4. Technical, traffic, and security data
The application may record limited technical information such as IP address, browser or device information, requested path, timestamps, processing status, error information, and security-event details. This data is used for rate limiting, abuse prevention, troubleshooting, reliability, analytics, and incident investigation.
Guest session identifiers used for ownership and analytics are stored as one-way keyed fingerprints rather than raw session IDs.
6. Security measures
Security controls include private file storage, upload validation, file-size and image-dimension limits, signed downloads, authorization checks, CSRF protection, encrypted sessions, password hashing, rate limiting, audit logging, and content sanitization where applicable.
No internet service can guarantee absolute security. Report suspected vulnerabilities through the security report form and avoid publicly disclosing sensitive details before the issue can be reviewed.
7. Your choices
You may update your profile information, change your password, or delete your account from the profile page. You may also contact us to ask questions about stored information or request assistance.
Some records may be retained when required for security, fraud prevention, legal compliance, dispute resolution, or system integrity.
8. Contact
Questions about this policy can be submitted through the contact form. For vulnerabilities or suspected attacks, use the security report form.