aimagetools Privacy Policy
October 2, 2026
How We Handle Your Privacy
Information We Collect
aimagetools processes information for account features; this does not mean that image files are uploaded. Firebase email/password and Google authentication process an account identifier, email address, email-verification status, and authentication provider. Our Cloudflare Worker and D1 database process the account identifier and daily usage records. Contact requests may also include the information you submit and necessary technical information. Account registration and email verification are used for account features; image processing remains local.
Image Processing
The official image tools process selected images and produce outputs locally in your web browser. Raw image files are not uploaded to, stored on, or processed by our servers through the tools. This local processing statement does not cover account, usage, or contact records, which may be processed server-side as described in this policy.
Cookies, Analytics, and Advertising
Depending on your location, consent choices, and applicable law, aimagetools may use Google Analytics for site usage and performance analytics and Google AdSense for advertising. These services may process cookies or similar technologies, IP address, browser and device data, pages, referrer, and interaction information. Analytics and advertising are used only as applicable. You can manage preferences through available consent controls, your browser, or Google's settings.
Third-Party Services
Our third-party service providers include Firebase for email/password and Google authentication; Cloudflare Worker and D1 for account and usage records. Google Analytics and Google AdSense may also be used only as applicable. We may receive account and service-status events from these providers. Each provider handles information under its own privacy policy and terms, and information may be processed outside your country.
Provider, retention, and overseas transfer table
| Provider | Data categories | Purpose | Retention | Overseas transfer | Timing/method | Recipient | Refusal impact |
|---|---|---|---|---|---|---|---|
| Firebase | Account ID, email, verification status, auth provider | Authentication and account security | While the account is active, then as needed for legal, dispute, and abuse records | United States and Google/Firebase processing regions | When you create, sign in to, or verify an account, over encrypted network requests | Google LLC / Firebase | Account login may not work |
| Cloudflare | Account ID, usage counters, request and security metadata | Account API, usage limits, D1 storage, abuse prevention | D1 contract and withdrawal records: 5 years; complaints and disputes: 3 years; display/advertising records: 6 months. After the retention period expires, only necessary personal information is anonymized through a separate internal approval procedure | Cloudflare global network regions including United States and EU | When account, usage, or security requests are processed, over encrypted network requests | Cloudflare, Inc. | Counted edits and account features may not work |
| Vercel | Request logs, IP address, device/browser metadata, performance events | Hosting, delivery, reliability, and performance monitoring | According to Vercel project/log settings and legal needs | Vercel global edge and hosting regions including United States | When you visit the website or a deployment asset is served, over encrypted network requests | Vercel Inc. | The website may not be delivered reliably |
| Cookie or advertising IDs, IP address, browser/device data, page views, events, ad interactions | Analytics, ads, measurement, and fraud prevention where consent and law allow | According to Google Analytics/AdSense settings and applicable law | Google global processing regions including United States | When tags load after consent state is applied, via browser requests and cookies or similar technology | Google LLC | Non-essential analytics or personalized ads may be limited |
Data Security and Retention
Raw image files processed by the tools are not uploaded to our servers. We retain account, usage, contact, and security records only as needed for the service, legal obligations, dispute handling, and abuse prevention. Website connections use HTTPS, but no online service can guarantee absolute security.
Changes to This Privacy Policy
We may update this Privacy Policy when our service, data practices, or legal requirements change. We will post the revised policy here and update the 'Last Updated' date. Please review it periodically.
Contact, Account, and Deletion Requests
For privacy questions or account access or deletion requests, contact support at [email protected]. We will handle requests under applicable consumer-protection rules. You may also contact us about the information associated with your account.