Summary
Your photos are processed entirely in your browser using the HTML5 Canvas API. They are never uploaded, stored, or transmitted to our servers. We collect the absolute minimum data needed to operate the website.
1. Controller (Art. 4 (7) GDPR)
Not Another Mate Software GmbH
Steinebach 3, 6850 Dornbirn, Austria
Email: hello@photofilesize.com
Full company details: see Imprint.
2. Image data — no processing on our side
All image resizing, cropping, compression, conversion and optional background removal happens locally in your browser. Your photos never leave your device. We have no technical means to access, view or recover them.
The optional background-removal model is downloaded from a public CDN (Hugging Face / jsDelivr) on first use and then cached in your browser. The CDN provider may log your IP address for the duration of the download as part of normal web infrastructure.
3. Server log files
When you visit the site, our hosting provider automatically processes technical data required to deliver the page:
- IP address (truncated where possible)
- Date and time of the request
- Requested URL, HTTP status, transferred volume
- Referrer URL, browser, operating system
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in operating and securing the website).
Storage period: typically up to 14 days, then deleted or anonymised.
4. Cookies and local storage
The tool itself works without cookies. We may store small technical preferences (e.g. last selected preset) in your browser's local storage. These never leave your device.
Third-party services described below may set cookies — only with your consent.
5. Analytics
We may use a privacy-friendly analytics tool (e.g. Plausible or a self-hosted equivalent) that aggregates anonymous page views without cookies and without personal identifiers.
Legal basis: Art. 6 (1) (f) GDPR. If a cookie-based analytics provider is used, processing is based on Art. 6 (1) (a) GDPR (consent).
6. Advertising (Google AdSense)
We may display ads via Google AdSense, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. AdSense uses cookies and similar technologies to serve and measure ads. This may involve transfer of data to Google LLC in the USA, based on the EU-US Data Privacy Framework.
Legal basis: Art. 6 (1) (a) GDPR (consent collected via the cookie banner). You can withdraw consent at any time via the cookie settings link in the footer or manage personalised ads at Google Ad Settings. Google's privacy policy: policies.google.com/privacy.
7. Recipients of data
We do not sell or share personal data. Technical data may be processed by:
- Our hosting / CDN provider (for delivering the website)
- Our analytics provider (anonymous, where applicable)
- Google Ireland Limited / Google LLC (only if you consent to advertising cookies)
8. Transfers to third countries
Where data is transferred outside the EU/EEA (in particular to the USA via Google), we rely on the EU-US Data Privacy Framework and/or EU Standard Contractual Clauses in accordance with Art. 46 GDPR.
9. Your rights under the GDPR
You have the right to:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
- Withdraw consent at any time, without affecting prior lawful processing
To exercise these rights contact hello@photofilesize.com.
You also have the right to lodge a complaint with a supervisory authority — for our company, the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.
10. Children
This site is not directed at children under 16.
11. Changes to this policy
We may update this policy to reflect changes in the service or legal requirements. The current version is always available on this page.