Privacy Policy

Effective 13 September 2026 · Last updated 13 September 2026

1. Who this policy covers

This policy applies to imglean (referred to below as "we" or "us"), served at imglean.com, www.imglean.com and app.imglean.com. It describes every situation in which personal data is involved when you use the service.

The data controller responsible for that processing is:

[[FILL:OPERATOR_LEGAL_NAME]]
[[FILL:OPERATOR_ADDRESS]]

For any privacy question or request, write to privacy@imglean.com.

2. What we do not collect

This list is the point of the product, so it is worth being explicit:

• Your images and files. They are read by your browser and never transmitted to us. There is no upload step, because there is no server doing the work.
• Your identity. No account, no login, no password, no profile.
• Your email address. We only ever see it if you choose to write to us.
• Analytics or behavioural data. We do not run analytics of any kind, and we do not record what you do on the page.
• Advertising identifiers. We do not serve advertising anywhere on imglean today.
• Which files you converted, or how many. That count never leaves your device.

You do not have to take any of this on trust. The marketing page explains how to check it yourself in about a minute, using the developer tools you already have.

3. What stays on your own device

We store exactly one item in your browser's localStorage: your language preference, under the key imglean.lang. It holds a short code such as en or zh.

It contains no identifier, it is not a cookie, and it is never sent to us. It exists so that the page does not reset to English every time you open it. Clearing your browser data removes it, and the site keeps working.

4. What our hosting provider processes

imglean is a set of static files. To deliver them we use Cloudflare as our hosting and content-delivery provider.

Like every hosting provider, Cloudflare processes standard connection data in order to serve a request at all: your IP address, the user agent your browser sends, the URL requested, and a timestamp. It also processes this data for security purposes, such as absorbing denial-of-service attacks and blocking abusive traffic. This happens for every website you visit, including ours.

We want to be precise about what this does and does not mean:

• There is no database of users behind imglean. There is nothing to look you up in.
• We do not use this connection data to identify you, profile you, or build advertising audiences.
• We do not combine it with anything else, because there is nothing else.
• We do not sell it, and we do not share it with anyone beyond the provider that generates it.

Legal basis. Where the GDPR or the UK GDPR applies, this processing rests on our legitimate interests under Article 6(1)(f): operating a website that is secure, available and not abused. It is not based on consent, because it is not optional for us — a website cannot be served without it.

Cloudflare explains its own processing in its privacy policy. In limited circumstances — for example when protecting a site against automated abuse — Cloudflare may set a strictly necessary security cookie. We do not set any cookies ourselves.

5. Cookies

imglean sets no cookies for advertising, analytics or tracking. Consequently you will not see a cookie consent banner on this site: there is nothing for you to consent to.

If that ever changes — for example if we introduce advertising — the banner will appear before any non-essential cookie is set, not after.

6. Importing an image from a URL

The tool lets you paste the address of an image instead of choosing a file. When you do that, your browser requests the image directly from that website. The image does not pass through us.

Two consequences follow, and both are worth knowing:

• The other website can see you. It receives your IP address and the request, exactly as if you had visited it directly. We have no control over what it does with that, and we are not a party to it. If you would rather not reveal your IP address to that site, download the image first and then open it from your device.
• We do not learn which URLs you imported. The request goes from your browser to the other site; nothing about it is reported back to us. We also cannot fix problems on the other end — if a site blocks cross-origin requests, the browser will refuse, and our only advice is to download the file instead.

7. Analytics and advertising

Today imglean runs no analytics and displays no advertising, on any of its pages.

Should advertising be introduced in future, it will appear only on the marketing site at www.imglean.com. The tool page at app.imglean.com will never carry third-party advertising or tracking. We can commit to this because it is technically enforced: the tool page sends a Content-Security-Policy header that forbids loading scripts from any other domain, so third-party ad code could not run there even by mistake.

If this changes, this policy will be updated first, and the "last updated" date at the top will change with it.

8. If we introduce paid plans

imglean is currently free and has no paid tier. If we launch one, payments will be handled by a Merchant of Record — a reseller that sells on our behalf and takes responsibility for payment processing, tax and refunds. Payments will never be processed by us directly, and we will never hold your card details.

In that case we would receive a limited order record (for example a customer email address and the plan purchased). That would be the first time we hold personal data at the application layer, so this policy will be revised before any payment can be taken, and the sections above that describe what we do not collect will be rewritten to reflect it. You will not learn about it after the fact.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete or restrict the processing of your personal data, to object to processing based on legitimate interests, to receive your data in a portable form, and to withdraw any consent you have given.

In practice, a request will usually end with us confirming that we hold nothing about you — because at the application layer we genuinely do not. Where a request concerns connection data, that data is held by our hosting provider rather than by us; we will explain how to contact them, and we will not ask you to prove your identity for data we do not have.

California residents. We do not sell or share personal information, and we do not collect the categories of personal information that the CCPA/CPRA is aimed at, for the reasons set out in section 2. We will not discriminate against you for exercising any privacy right.

If you believe we have handled your data improperly, you have the right to lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office). We would appreciate the chance to answer you first: privacy@imglean.com.

10. International transfers

Cloudflare operates a worldwide network, so connection data may be processed outside the country you are in, including in the United States. Where personal data of individuals in the EEA or the UK is transferred, our provider relies on appropriate safeguards — Standard Contractual Clauses and the UK Addendum, and the EU-US Data Privacy Framework where it applies.

11. How long data is kept

We hold no personal data, so there is nothing for us to retain or delete. Connection data is retained by our hosting provider under the retention periods described in their own privacy policy.

12. Security

The site is served over HTTPS. The tool page sends security headers that restrict it to its own origin, disable framing, and disallow plugins. Because there is no upload and no user database, there is no store of your files on our side that could be breached — the most common risk in tools like this one simply does not exist here.

13. Children

imglean is a general-purpose utility and is not directed at children. We do not knowingly collect personal data from children under 13 (or under 16 where that higher age applies locally). If you believe a child has provided us with personal data, contact us and we will delete it.

14. Changes to this policy

We may update this policy to reflect changes in the service or in the law. When we do, we will update the "last updated" date at the top. If a change is material — for example introducing advertising or paid plans — we will say so plainly on this page rather than quietly revising the text.

15. Contact

Privacy questions and requests: privacy@imglean.com
General support: support@imglean.com