Skip to main content
PNGful

Privacy Policy

Last updated: July 14, 2026

This policy describes how PNGful actually works, but it has not yet been reviewed by a lawyer. Have it professionally reviewed before relying on it for regulatory compliance.

Summary

The short version, in plain English:

  • Your images stay on your device. Every tool on PNGful runs locally in your browser. Your files are never uploaded to our servers — we could not look at them even if we wanted to.
  • We don’t require accounts. There is no sign-up, no login, and no profile. You can use every tool anonymously.
  • The only personal data we collect directly is what you send us through the contact form — your name, email address, and message.
  • Optional analytics and advertising services, when configured, may set cookies and collect standard web-usage data. They never receive your images, filenames, or image metadata.

How image processing works

PNGful is built so that image processing happens entirely in your browser. When you compress, resize, crop, or convert an image, or remove its metadata, the work is done by code running on your own device. Your files are never transmitted to PNGful.

This is not just a promise — it is how the site is architected. There are no image upload endpoints on our servers, so there is no way for your files to reach us. Image content and filenames never appear in our server logs or analytics. If you close the tab before downloading a result, the work is simply discarded by your browser.

Information we collect

We collect three narrow categories of information:

Contact form submissions. If you use our contact form, we receive the name, email address, subject, and message you provide. Submissions are delivered to us by email through Resend, an email delivery service, and may also be stored in a database hosted on Neon (PostgreSQL) so we can track which messages have been answered. This is the only personal data PNGful collects directly, and you only share it if you choose to write to us.

Analytics events (optional). When Google Analytics 4 is configured, it collects standard web analytics — pages viewed, approximate location derived from IP address, browser and device type, and how visitors arrive at the site. We also record coarse, bucketed events about tool usage, such as which tool was used, the output format chosen, and a broad file-size bucket (for example “1–5 MB”). These events never include filenames, image contents, EXIF values, or GPS coordinates.

Server logs. PNGful is hosted on Cloudflare. Like any web host, Cloudflare processes IP addresses and request data in order to serve the site, cache content, and detect and mitigate abuse such as denial-of-service attacks. These logs relate to page requests, not to your images, which never leave your device.

Cookies and similar technologies

This section serves as our cookie policy.

The tools themselves work without cookies. You can compress, resize, crop, and convert images on PNGful without any cookies being required for the tools to function.

Analytics cookies (optional). When Google Analytics 4 is configured, it sets cookies that distinguish visitors and sessions so that usage statistics can be measured.

Advertising cookies (optional). When Google AdSense is configured, it may set cookies used to serve and measure ads. Where consent laws apply, ad-related storage defaults to denied until you give consent — see the Advertising section below.

Local storage. Some tools let you save presets (for example, a favorite resize dimension). These presets are kept in your browser’s localStorage, which stays on your device and is never sent to us. You can clear it at any time through your browser’s site-data settings.

Controlling cookies. Every major browser lets you view, block, and delete cookies. Look for “Cookies and site data” (Chrome and Edge), “Enhanced Tracking Protection” and cookie settings (Firefox), or “Privacy” preferences (Safari). You can also block third-party cookies entirely or browse in private/incognito mode. Blocking cookies will not stop PNGful’s tools from working.

Advertising

PNGful may display advertising through Google AdSense, but only when advertising is actually configured on the site. We use Google Consent Mode with ad consent defaulting to denied: until and unless you consent, ad-related cookies and personalized advertising signals are not used. In regions where consent laws apply (such as the EEA and UK), a certified consent management platform must be in place before any personalized ads are served, and you can decline or withdraw consent through that platform at any time. Ads never receive your images or any information about the files you process.

Analytics

When configured, we use Google Analytics 4 to understand how the site is used — which pages are popular, which tools people rely on, and where the experience can improve. As described above, tool events are deliberately coarse: a tool identifier, a format, a size bucket. We do not send filenames, image contents, EXIF data, or GPS information to analytics, and we do not use analytics to identify individual visitors. Google processes this data as described in its own privacy documentation.

Data retention

Because your images never reach us, there is nothing image-related for us to retain or delete. Contact form submissions are kept until your inquiry has been handled, plus a reasonable period afterward so we have context if you follow up, after which they may be deleted. Analytics data, when collected, is retained according to the retention settings of Google Analytics.

Your rights

Depending on where you live, you may have legal rights over your personal data — such as the right to access, correct, or delete it, to object to or restrict its processing, or to receive a copy of it (rights of the kind provided by the GDPR in Europe and the CCPA/CPRA in California). Because the only personal data we hold directly is contact form correspondence, exercising these rights with us is simple: email hello@pngful.com and tell us what you would like us to do. We will respond to access and deletion requests as promptly as we reasonably can.

We describe these rights in good faith, but we do not claim any particular certification or formal compliance program. If you believe we have not handled your data properly, you may also have the right to complain to your local data protection authority.

We do not sell personal information, and we do not share it for cross-context behavioral advertising beyond what is described in the Advertising section above.

Children’s privacy

PNGful is not directed at children under 13, and we do not knowingly collect personal information from them. Because the site requires no account and processes images locally, children who happen to use the tools do not transmit personal data to us. If you believe a child has submitted personal information through our contact form, please email us and we will delete it.

Security

All traffic to PNGful is served over HTTPS. The most important security property of the site is architectural: because your images are never uploaded or stored, they cannot be exposed in a breach of our systems. For the limited data we do handle — contact form submissions — we rely on reputable providers (Resend and Neon) and restrict access to the site operators.

That said, we want to be honest: no website or service can guarantee perfect security. We work to keep our footprint small and our practices sensible, but we cannot promise that the systems we depend on will never have an incident.

International visitors

PNGful is operated in the United States, and the limited data we collect (contact form submissions and, when configured, analytics) is processed in the United States. If you visit from outside the US, you understand that this data will be transferred to and handled in the US, where privacy laws may differ from those in your country. Your images, as always, are processed only on your own device wherever you are.

Changes to this policy

If we change how the site works in a way that affects your privacy, we will update this policy and revise the “Last updated” date at the top. Material changes — for example, enabling analytics or advertising for the first time — will be reflected here before or as they take effect. We encourage you to review this page occasionally.

Contact

Questions, concerns, or requests about your data? Email us at hello@pngful.com. We read every message.