Privacy policy

Every image you open in Pixora is processed entirely inside your browser, on your own device. The file is never transmitted to us or to anyone else. We do not have a server that receives images, so there is nothing for us to store, retain, inspect, sell or train a model on.

You do not have to take our word for it. Open your browser’s developer tools, switch to the Network tab, and compress an image. You will see no request carrying your file. Alternatively, load the site once, disconnect from the internet, and keep using it — the tools continue to work, because they were never talking to a server.

We count page views so we know which tools are worth improving. This uses no cookies and no browser storage of any kind. For each page view we record: the path you visited, the hostname of the site that linked you here (never the full URL), your country as reported by our CDN, and your screen width.

To count unique visitors without identifying anyone, we compute a hash of your IP address, your browser’s user-agent string, a secret key, and today’s date. We store only that hash. Your IP address is never written to disk. Because the current date is part of the hash, the same person visiting on two different days produces two unrelated values. Our database is structurally incapable of following you from one day to the next, let alone across other websites.

If your browser sends a Do Not Track or Global Privacy Control signal, we do not record the page view at all.

Pixora is free because it shows advertisements supplied by Google AdSense. Running the site costs us very little precisely because no server touches your images, and ads cover the rest.

Google is a third party and may set cookies to personalise the ads you see, and to measure them. If you consent, it does. If you decline, you will still see ads, but non-personalised ones. You can change your mind at any time by clearing this site’s cookies, which will bring the consent banner back.

Google’s use of advertising cookies is governed by its own policies. You can review and control them at myadcenter.google.com and read about how Google uses data at policies.google.com/technologies/partner-sites.

Advertisements never see your images. Ad code runs in a sandboxed cross-origin iframe and has no access to the files you open or to the canvas we render them on.

Exactly one, and only after you interact with the consent banner:

Your theme preference (light or dark) is kept in your browser’s local storage. It is never sent anywhere.

Under the GDPR and similar laws you may request access to, correction of, or erasure of your personal data. In our case this is close to moot: we hold no images, no IP addresses, no email addresses and no accounts. The daily-rotating hashes we do hold cannot be linked back to you by us or by anyone else without your IP address, your exact user-agent string, and our secret key.

If you have a question, write to [email protected].