Privacy Policy
Last updated: July 14, 2026
This policy describes how PNGful actually works, but it has not yet been reviewed by a lawyer. Have it professionally reviewed before relying on it for regulatory compliance.
Summary
The short version, in plain English:
- We don’t require accounts. There is no sign-up, no login, and no profile. You can use every tool anonymously.
- The only personal data we collect directly is what you send us through the contact form — your name, email address, and message.
- We collect anonymous usage analytics. We record cookieless, aggregate statistics — pages viewed, which tools are used, coarse device type, and approximate country — to understand how the site is used and improve it. These statistics are not tied to your identity and never include image content, filenames, or image metadata.
- Optional third-party analytics and advertising services, when configured, may set cookies and collect standard web-usage data.
Information we collect
We collect the following categories of information:
Contact form submissions. If you use our contact form, we receive the name, email address, subject, and message you provide. Submissions are delivered to us by email through Resend, an email delivery service, and may also be stored in a database hosted on Neon (PostgreSQL) so we can track which messages have been answered. This is the only personal data PNGful collects directly, and you only share it if you choose to write to us.
First-party usage analytics. We record anonymous, cookieless events about how the site is used: page views, which tools are opened and used, the output format chosen, a broad file-size bucket (for example “1–5 MB”), the approximate country and device type derived at the Cloudflare edge, and the referring website. To estimate unique visitors we compute a daily-rotating, salted hash that cannot be reversed to an IP address and cannot link you across days. These events are stored in Cloudflare D1 and are used only in aggregate. They never include filenames, image contents, EXIF values, or GPS coordinates.
Third-party analytics (optional). We use Ahrefs Web Analytics, a privacy-friendly, cookieless visitor-counting service, and — when configured — Google Analytics 4. These provide standard web analytics such as pages viewed, approximate location derived from IP address, browser and device type, and how visitors arrive at the site.
Server logs. PNGful is hosted on Cloudflare. Like any web host, Cloudflare processes IP addresses and request data in order to serve the site, cache content, and detect and mitigate abuse such as denial-of-service attacks.
Cookies and similar technologies
This section serves as our cookie policy.
The tools themselves work without cookies. You can compress, resize, crop, and convert images on PNGful without any cookies being required for the tools to function.
Our usage analytics are cookieless. Both our first-party analytics and Ahrefs Web Analytics count visits without setting cookies or storing identifiers on your device.
Analytics cookies (optional). When Google Analytics 4 is configured, it sets cookies that distinguish visitors and sessions so that usage statistics can be measured.
Advertising cookies (optional). When Google AdSense is configured, it may set cookies used to serve and measure ads. Where consent laws apply, ad-related storage defaults to denied until you give consent — see the Advertising section below.
Local storage. Some tools let you save presets (for example, a favorite resize dimension). These presets are kept in your browser’s localStorage, which stays on your device and is never sent to us. You can clear it at any time through your browser’s site-data settings.
Controlling cookies. Every major browser lets you view, block, and delete cookies. Look for “Cookies and site data” (Chrome and Edge), “Enhanced Tracking Protection” and cookie settings (Firefox), or “Privacy” preferences (Safari). You can also block third-party cookies entirely or browse in private/incognito mode. Blocking cookies will not stop PNGful’s tools from working.
Advertising
PNGful may display advertising through Google AdSense, but only when advertising is actually configured on the site. We use Google Consent Mode with ad consent defaulting to denied: until and unless you consent, ad-related cookies and personalized advertising signals are not used. In regions where consent laws apply (such as the EEA and UK), a certified consent management platform must be in place before any personalized ads are served, and you can decline or withdraw consent through that platform at any time.
Analytics
We use analytics to understand how the site is used — which pages are popular, which tools people rely on, and where the experience can improve. Our first-party analytics and Ahrefs Web Analytics are cookieless and anonymous. Our own tool events are deliberately coarse: a tool identifier, a format, a size bucket. We do not use analytics to identify individual visitors. When Google Analytics 4 is configured, Google processes that data as described in its own privacy documentation.
Data retention
Contact form submissions are kept until your inquiry has been handled, plus a reasonable period afterward so we have context if you follow up, after which they may be deleted. Anonymous usage-analytics events are retained for a rolling window (typically up to about a year) and may be periodically purged; because they are not linked to your identity, they are not personal data we can trace back to you. Third-party analytics data, when collected, is retained according to that provider’s retention settings.
Your rights
Depending on where you live, you may have legal rights over your personal data — such as the right to access, correct, or delete it, to object to or restrict its processing, or to receive a copy of it (rights of the kind provided by the GDPR in Europe and the CCPA/CPRA in California). Because the only personal data we hold directly is contact form correspondence, exercising these rights with us is simple: email hello@pngful.com and tell us what you would like us to do. We will respond to access and deletion requests as promptly as we reasonably can.
We describe these rights in good faith, but we do not claim any particular certification or formal compliance program. If you believe we have not handled your data properly, you may also have the right to complain to your local data protection authority.
We do not sell personal information, and we do not share it for cross-context behavioral advertising beyond what is described in the Advertising section above.
Children’s privacy
PNGful is not directed at children under 13, and we do not knowingly collect personal information from them. Because the site requires no account, children who happen to use the tools do not transmit personal data to us beyond the anonymous analytics described above. If you believe a child has submitted personal information through our contact form, please email us and we will delete it.
Security
All traffic to PNGful is served over HTTPS. For the limited data we do handle — contact form submissions — we rely on reputable providers (Resend and Neon) and restrict access to the site operators.
That said, we want to be honest: no website or service can guarantee perfect security. We work to keep our footprint small and our practices sensible, but we cannot promise that the systems we depend on will never have an incident.
International visitors
PNGful is operated in the United States, and the limited data we collect (contact form submissions and anonymous analytics) is processed in the United States. If you visit from outside the US, you understand that this data will be transferred to and handled in the US, where privacy laws may differ from those in your country.
Changes to this policy
If we change how the site works in a way that affects your privacy, we will update this policy and revise the “Last updated” date at the top. Material changes — for example, enabling advertising for the first time — will be reflected here before or as they take effect. We encourage you to review this page occasionally.
Contact
Questions, concerns, or requests about your data? Email us at hello@pngful.com. We read every message.