Legal & Privacy

Privacy Policy

Last Updated: September 25, 2026. Learn how ImgVexa protects your personal privacy through 100% in-browser client-side image processing.

Quick Summary (TL;DR):
We do NOT upload, collect, view, or store your photos. When you use any tool on ImgVexa, your images are processed 100% locally inside your web browser using HTML5 Canvas, WebAssembly, and JavaScript. Your files never leave your computer or smartphone.

1. Information We Do NOT Collect

Unlike standard online conversion services, ImgVexa has no server-side upload queue:

  • Your Images & Documents: When you select or drag & drop an image onto ImgVexa, it is loaded directly into browser memory (RAM) via the standard FileReader API and processed entirely on your device. It is never uploaded to our server -- with one explicit, opt-in exception: see "AI Background Removal" under Section 4 below.
  • Personal Identification: We do not require accounts, usernames, passwords, phone numbers, or credit cards.
  • Embedded Metadata: Any EXIF, geolocation, or camera metadata contained in your photos stays entirely on your local machine, and you can strip it instantly using our in-browser EXIF Remover.

2. Information We Collect Automatically

When you visit https://imgvexa.com, our web hosting servers and content delivery network (Cloudflare) collect standard, non-personally identifiable technical telemetry necessary to deliver web pages securely:

  • Technical Diagnostics: Browser type, operating system, preferred language, HTTP referrer, and page request timestamps.
  • Aggregate Traffic Metrics: Total page hits and bandwidth usage to protect against distributed denial-of-service (DDoS) attacks and optimize server uptime.

This technical data is stored in standard transient server logs, is never linked to individual identity, and is purged regularly.

3. Cookies and Local Storage

ImgVexa uses minimal, privacy-friendly client-side storage solely to power user interface preferences:

  • Theme Preference: A lightweight cookie named imgvexa-theme (set to dark or light) is used to prevent screen flash (Zero-FOUC) when switching pages.
  • Local Quota Counter: Browser localStorage (imgvexa_daily_ops) is used locally on your device to keep track of your daily operation counter so you know how many operations you have executed. This data resides solely on your browser and is never synced to external servers.
  • We do NOT use invasive cross-site advertising tracking cookies or fingerprinting beacons.

4. Third-Party Services

We work with trusted industry providers for infrastructure delivery:

  • Cloudflare: Provides SSL encryption, DDoS mitigation, and global CDN caching for static website assets (CSS, JS, SVG icons).
  • Google Fonts: Delivers the Outfit and Work Sans typography. Requests to Google Fonts do not send cookies and contain only standard browser headers.

AI Background Removal (Passport Photo Maker only)

The "Remove / Replace Background" option inside the Passport Photo Maker tool is the single exception to our in-browser-only processing described above. Precise hair and edge detection for background removal requires a server-side AI model that cannot run reliably in a browser. If you turn this option on:

  • You will always see an explicit consent prompt first, naming this exact trade-off, before anything is sent anywhere. Declining leaves the feature off and nothing is uploaded.
  • Only if you confirm, that one photo is sent over an encrypted connection to our server, which forwards it to a background-removal AI service (BiRefNet, via Fal.ai) for processing, and returns the result to your browser.
  • The photo is not stored by us and is not used for any purpose other than producing that one result.
  • Every other tool and feature on ImgVexa, including the rest of Passport Photo Maker (solid-color background fill, cropping, sheet layout), remains 100% in-browser with nothing ever sent anywhere.

5. Data Security by Architecture

The safest data is data that is never collected in the first place. By shifting all computation to the client side:

  • There is no central database of user photos that could ever be hacked, leaked, or exposed.
  • Data in transit between you and ImgVexa is protected using modern HTTPS with TLS 1.3 encryption and strict HTTP Strict Transport Security (HSTS).
  • All tools function completely offline once the page has loaded in your browser.

6. Compliance with Global Privacy Frameworks (GDPR, CCPA, DPDP)

Because ImgVexa does not collect, process, profile, or sell personal data or uploaded media, our operational footprint complies natively with the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and India's Digital Personal Data Protection Act (DPDP).

You have no need to submit "Right to be Forgotten" or "Data Deletion" requests for uploaded images because we never hold your images at any point.

7. Children's Privacy

ImgVexa does not knowingly collect or solicit personal information from children under the age of 13. Because our service requires no registration and uploads no user data, it is safe for all audiences.

8. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect new tools or regulatory requirements. Any modifications will be posted immediately on this page with an updated "Last Updated" date at the top.

9. Contact Us

If you have any questions, suggestions, or concerns regarding this Privacy Policy or our client-side architecture, please reach out:

Privacy Contact: [email protected]
General Support: [email protected]
Website: https://imgvexa.com