Privacy Policy

Last updated 5 July 2026.

This policy explains what personal data imgi.co (the service, we, us) collects, why, how long we keep it, and the rights you have. We try to collect as little as possible.

Who is responsible

imgi.co is the data controller for the personal data described here. For any privacy question or to exercise your rights, contact hello@imgi.co.

What we collect and why

Images you upload. Stored so the service can show and share them. Anyone with the link can view them (see Public links).

Account data (if you register). Your email address and a securely hashed password, or a Google or Discord account identifier if you sign in with one of them. Used to create and secure your account and to let you manage your uploads across devices.

IP addresses. When you upload content or sign in, we record the IP address of the request. When you sign in we also record an approximate location (city and country, derived from the connection by our hosting provider) so you can recognise your own sessions on the account page. We use this only to prevent and investigate abuse (spam, malicious uploads, illegal content), to help you spot sign-ins that are not yours, and to meet legal obligations. The lawful basis is our legitimate interest in keeping the service safe and lawful.

Cookies. We set only essential cookies by default: one that keeps you signed in, and one that remembers which anonymous uploads belong to your browser. If you start a Pro checkout, Paddle sets essential cookies needed to process the payment and prevent fraud. Analytics and advertising cookies are set only if you allow them in the cookie notice. We use Google's ads measurement tag in cookieless mode: it stores nothing on your device and no advertising cookie is set, it only lets us count, in aggregate, whether our own ads led to sign-ups. See the cookie notice on the site for details.

Google Analytics (optional). We use Google Analytics to understand which pages people visit and where visitors come from. Google Analytics sets cookies and processes your IP address and usage data on Google's servers; see Google's privacy policy for how Google handles this data. In the EEA, the UK and Switzerland it stays off unless you allow the Analytics category in the cookie notice (the lawful basis is your consent); elsewhere it runs by default and you can switch it off in the same notice at any time. When it is off, Google Analytics sets no cookies and receives only aggregate, cookieless signals.

Usage statistics. We count page views on our own servers (page visited, the site that linked to you, and your country derived from your connection). To count unique visitors we also derive a short anonymous code from your connection that changes every day and cannot be traced back to you or linked across days. This is aggregate and cookieless: no identifier is stored on your device and no profile is built about you.

Affiliate links. Some pages may show a clearly labeled recommendation banner. If you buy something through such a link, imgi may earn a commission from the seller at no extra cost to you. These are plain links: we load no advertising scripts or pixels, and no advertising cookie is set on our domain. What the destination site does after you arrive is governed by its own privacy policy.

Reports and feedback. If you report content or send us feedback through the on-site form, we keep the details you submit (for feedback, also the page it was sent from) so we can act on it.

Payment data (if you buy Pro). Payments are processed by Paddle.com as Merchant of Record. Paddle collects and processes your payment details, billing address, and tax location under its own privacy policy; we never see or store your card details. We receive and store your subscription status and a Paddle customer reference so we can activate Pro on your account.

Content scanning

To keep the service lawful and safe, uploaded content may be scanned for child sexual abuse material and other illegal or prohibited content. Confirmed illegal material is removed and reported to the appropriate authorities, and related records may be preserved as required by law.

How long we keep data

Uploaded images are kept until you or we delete them. When an image is deleted, it is removed from public view immediately and its file is retained for up to 30 days, for abuse prevention and to allow recovery, then permanently purged. Account data is kept until you delete your account. IP addresses logged for abuse prevention are retained for up to 90 days, after which they are removed, unless a specific record must be preserved longer for an active report or legal matter.

Who we share data with

We do not sell your data and we do not show personalised ads. We use a small number of service providers who process data on our behalf: Cloudflare (hosting, storage, security, and bot protection), Sightengine (automated scanning of uploaded images for illegal and prohibited content), Resend (sending account emails), Paddle (payment processing and subscription billing, as Merchant of Record), and Google or Discord (only if you choose to sign in with them). These providers may process data outside your country under appropriate safeguards.

Our forms are protected by Cloudflare Turnstile, which checks that submissions come from a real person rather than a bot. See Cloudflare's Turnstile Privacy Addendum for details.

Public and private links

By default, comparisons and images are viewable by anyone who has the link. Links are not listed publicly, but treat them as shareable and do not upload anything you need to keep private. Pro subscribers can mark an upload private, in which case only the owner (signed in, or from the browser that uploaded it) can open the link.

Your rights

If you are in the EU or EEA, you have the right to access, correct, delete, export, and object to the processing of your personal data, and to lodge a complaint with your data protection authority. If you have an account you can delete it at any time from your account page, which removes your account and your uploaded images. For anything else, or if you uploaded without an account, contact hello@imgi.co and we will help.

Changes

We update this policy when our data practices change and revise the date above. Significant changes will be highlighted on the site.