Are my images uploaded to your servers?

No. Every tool on this site processes your image inside your own browser using the Canvas API. There is no upload step and no server-side image processing, so we never receive your files at any point. You can verify this by opening your browser's developer tools, switching to the Network tab, and using any tool — your image is not transmitted anywhere.

How can I be sure the images are not being sent somewhere?

Check it yourself rather than trusting the claim. Open developer tools, go to the Network tab, drop an image into any tool, and watch the requests. The page loads, and then nothing further is sent. This is a structural property of how the site is built, not a policy we could quietly change without you being able to notice.

Do I have to create an account?

No. Using the tools never requires an account and never will. We plan to add an optional sign-in for a points leaderboard, which is entirely separate from using the tools — you can ignore it completely and everything still works.

What would an account collect?

An email address, a password stored as a secure hash, a display name you choose for the leaderboard, and a count of tools you have used. Your images would still never be uploaded — the account tracks points, not files. Marketing email would be opt-in with an unchecked box, never opt-out.

We set none of our own, and our analytics is cookieless. Google does set third-party cookies, because it supplies the ads that pay for the site — those are used to choose and measure ads, and you can switch off personalised ones at My Ad Center without losing access to anything here. If you create an account once that feature exists, a session cookie would be set so you stay signed in.

Do the ads know what images I am editing?

No, and they structurally cannot. Your images are opened and processed inside your own browser and are never transmitted to us, so there is nothing about them for us to pass to Google or anyone else. Google selects ads from the page you are on and from its own record of your browsing elsewhere — never from the contents of your files.

What analytics do you use?

Cloudflare Web Analytics, which sets no cookies, does not fingerprint your browser, and cannot see anything you do on other websites. It tells us which pages get used and how fast they load, in aggregate. It is not used for advertising and it never sees your images.

Do you sell any data?

No. The site is funded by ads placed on pages, not by selling information about visitors. We hold nothing to sell — no account, no images, and no analytics that identifies anyone.

Privacy Policy

The important part in one line: your images are processed inside your browser and are never uploaded to us.

Last updated 6 August 2026

Your images

Images, photos and PDFs you use with the tools on this site are never uploaded. They are opened and processed by your own web browser, on your own device, and are never transmitted to us or to anyone else.

This is not a promise about how carefully we handle your files. It is a statement that we never receive them. There is no server-side image processing on this site, so there is nothing to store, cache, or log.

You can verify this rather than trust it

Open your browser’s developer tools, switch to the Network tab, and use any tool here. The page loads, and then nothing further is sent. That is a property of how the site is built, not a policy we could quietly change without it being visible.

The same applies to what is inside your files. When the EXIF viewer shows you the GPS coordinates stored in a photo, that reading happened on your machine. We never see the photo, and we never see the location.

What we collect

We collect nothing that identifies you. There is no sign-in, and our own analytics cannot follow you between visits or across other websites.

Google, which supplies the ads that pay for this site, is a different matter, and it would be dishonest to fold it into the same sentence. What it does is set out under Advertising below.

Visitor statistics

We use Cloudflare Web Analytics to see which pages are being used and which tools people find useful. It is deliberately the least invasive option available:

No cookies, and nothing stored on your device.
No fingerprinting — it does not attempt to identify your browser or device.
No cross-site tracking. It cannot see anything you do anywhere else, and is not used for advertising.
Figures are aggregated: page views, referring sites, country, and how quickly pages load. Not people.

None of that needs a consent dialog, and we chose it precisely so it would not: analytics that requires a banner is analytics that is tracking you. Advertising is what brings consent into the picture, and only for visitors it legally applies to — see below.

Server logs

The pages themselves are served by our hosting provider, which — like essentially every web host — records standard technical request information such as IP address, browser type, and which page was requested. We do not use this to build a profile of you and do not combine it with anything else. It does not include your images, because your images are never sent.

Optional accounts

We plan to add an optional account so people can collect points and appear on a leaderboard. It is a bit of fun, and it is entirely separate from using the tools.

Using a tool will never require an account

That is a deliberate line rather than a temporary state. Every tool on this site works fully without signing in, and will continue to.

When accounts exist, an account will involve:

An email address, used to sign in and reset your password.
A password, stored only as a secure hash — never in readable form.
A display name you choose, shown publicly on the leaderboard. Your email is never shown there.
A count of tools you have used, which is what the points are.

Your images remain outside all of this. The account records a number, not your files. Marketing email would be strictly opt-in, with an unchecked box and a working unsubscribe link in every message.

This section describes what is planned. This page will be updated with the specifics before any of it goes live, and the date at the top will tell you when that happened.

Cookies

We set no cookies of our own and do not use local storage to track you between visits. Our analytics is cookieless by design.

Google does set cookies, because it serves the ads that pay for this site. Those are third-party cookies, set by Google rather than by us, and they are described in full below.

Once accounts exist, signing in will also set a session cookie — that is simply how staying logged in works, and only if you choose to create an account.

Advertising

This site is free because it carries ads, supplied by Google AdSense. There is no premium tier and nothing is held back from you in exchange.

Here is what that means in practice, stated plainly rather than buried:

Google and its partners use cookies and similar device identifiers to select the ads you see, to cap how often you see the same one, and to measure whether they worked.
Google may use its own record of your previous visits to this and other websites to show you ads based on what it believes interests you. This is the part our own analytics deliberately does not do, and we are not going to pretend the ads do not do it either.
We do not give Google your images, because we never have them. Nothing you process here is transmitted to us or to anyone else.
We receive no personal information about you from Google — only aggregate figures on how the ads performed.

Turning personalised ads off

You can switch off personalised advertising for your Google account at My Ad Center, which applies across every site that uses Google’s advertising, not just this one. Broader opt-outs for many networks at once are at aboutads.info and youronlinechoices.eu. Ads do not go away when you do this — they simply stop being chosen based on you, and this site keeps working exactly as before.

Consent, if you are in the EEA, the UK or Switzerland

You will be asked before any personalised advertising happens, through Google’s own consent message. Whichever way you answer, every tool on this site keeps working — consent affects the ads, never your access to anything.

Everywhere else there is no banner, for the reason given further up: there is nothing of ours to ask you about.

Where ads are allowed to appear

Ads sit below the tool or alongside the written content. They are never placed between you and the thing you came to do, and never styled to be mistaken for a download or upload button. If one ever behaves otherwise, that is a fault worth reporting to us rather than something we intended.

Your rights

Under the UK GDPR, EU GDPR, CCPA and similar laws you have rights to access, correct, export and delete personal data held about you.

Today those rights have very little to act on, because we hold no personal data. Once accounts exist you will be able to see everything associated with yours, and delete it — which removes the account, the email address and the points along with it.

Your images are not covered by any of this, for the simple reason that we never had them.

Children

This site is not directed at children. We do not knowingly collect personal information from anyone under 13.

Links to other sites

Some tools link out to third parties — the EXIF viewer, for instance, offers a link to view a photo’s coordinates on OpenStreetMap. If you follow one, that site’s own privacy policy applies. We only send you there if you click.

Contact

Questions about this policy, or any request relating to your data, can go to [email protected].

Free Image Lab is operated by Eric Daft of Boundliss Media.

Frequently asked questions

Are my images uploaded to your servers?: No. Every tool on this site processes your image inside your own browser using the Canvas API. There is no upload step and no server-side image processing, so we never receive your files at any point. You can verify this by opening your browser's developer tools, switching to the Network tab, and using any tool — your image is not transmitted anywhere.
How can I be sure the images are not being sent somewhere?: Check it yourself rather than trusting the claim. Open developer tools, go to the Network tab, drop an image into any tool, and watch the requests. The page loads, and then nothing further is sent. This is a structural property of how the site is built, not a policy we could quietly change without you being able to notice.
Do I have to create an account?: No. Using the tools never requires an account and never will. We plan to add an optional sign-in for a points leaderboard, which is entirely separate from using the tools — you can ignore it completely and everything still works.
What would an account collect?: An email address, a password stored as a secure hash, a display name you choose for the leaderboard, and a count of tools you have used. Your images would still never be uploaded — the account tracks points, not files. Marketing email would be opt-in with an unchecked box, never opt-out.
Do you use cookies?: We set none of our own, and our analytics is cookieless. Google does set third-party cookies, because it supplies the ads that pay for the site — those are used to choose and measure ads, and you can switch off personalised ones at My Ad Center without losing access to anything here. If you create an account once that feature exists, a session cookie would be set so you stay signed in.
Do the ads know what images I am editing?: No, and they structurally cannot. Your images are opened and processed inside your own browser and are never transmitted to us, so there is nothing about them for us to pass to Google or anyone else. Google selects ads from the page you are on and from its own record of your browsing elsewhere — never from the contents of your files.
What analytics do you use?: Cloudflare Web Analytics, which sets no cookies, does not fingerprint your browser, and cannot see anything you do on other websites. It tells us which pages get used and how fast they load, in aggregate. It is not used for advertising and it never sees your images.
Do you sell any data?: No. The site is funded by ads placed on pages, not by selling information about visitors. We hold nothing to sell — no account, no images, and no analytics that identifies anyone.