Privacy Policy

This Privacy Policy explains how JPG Smaller processes information when you use the image tools at https://jpgsmaller.com. It describes the current application behavior, not marketing promises.

Last updated: 5 October 2026 Service: JPG Smaller Contact: [email protected]

1. Introduction

JPG Smaller provides browser-based tools that compress, resize, convert, crop, and inspect images. To deliver those results, the service must receive image data from you (or from a public URL you submit), process it on the server, and make a temporary download available.

This policy covers that processing. It does not create user accounts, customer databases, or a permanent image library.

2. What JPG Smaller is

JPG Smaller is an online image utility platform. Core tools run without requiring registration. Output sizes and dimensions shown on result cards come from the generated file, not from simulated values.

3. Information we process

Depending on how you use the service, JPG Smaller may process:

JPG Smaller does not currently operate a user account system, profile database, or mailing-list signup form on the website.

4. Uploaded images and files

When you use a tool, you may upload one or more image files. Uploads are accepted only when they pass validation for MIME type, extension, size, and dimensions. The configured maximum upload size is about 15 MB per file (subject to server and tool validation).

Supported raster formats currently include JPG/JPEG/JFIF, PNG, WebP, GIF, AVIF, and BMP, as configured in the application allowlists.

Uploaded images are processed so you can download a result. They are not published in a gallery, sold as a dataset, or used as a permanent photo library.

5. How image processing works

After validation, the server runs the selected tool (for example compression, resize, conversion, crop, or inspection). A result file is written to temporary storage under a random token. The browser can preview or download that file using tokenized API URLs.

Processing happens to produce your download. JPG Smaller does not use uploaded images to train public AI models as part of normal tool operation.

6. Temporary storage and deletion

Output files (and related temporary fetch files) are stored under private temporary storage that is not intended for public browsing. Downloads remain available only while the temporary file still exists.

The current configuration sets a temporary-file time-to-live of 3600 seconds (about 1 hour). An automatic cleanup routine removes temporary files older than that interval. Cleanup runs opportunistically during normal site requests rather than as a continuous background worker.

If a download link is opened after the file has been removed, the service returns an expired/not-found response and you need to process the image again.

Because cleanup is opportunistic, a file may be removed at or after the configured age once a cleanup pass runs. Do not treat temporary storage as archival storage. Keep your own copy of any file you need.

7. Remote image URLs

Some tools allow fetching a public image URL. When you use that feature, the server retrieves the remote file with configured safety limits (timeout, redirect limit, and a maximum fetch size of about 12 MB). The fetched file is held temporarily for processing and then cleaned up according to the temporary-storage rules above.

Only submit URLs you are allowed to access. Do not use URL fetch to probe private networks or unauthorized resources.

8. Sessions and cookies

JPG Smaller uses a session cookie named psid to support CSRF protection for processing requests. The cookie is HTTP-only and uses the SameSite=Lax attribute. When the site is served over HTTPS, the cookie is marked Secure.

This session cookie is essential for safe form/API use. The front-end JavaScript does not set analytics cookies or advertising cookies.

9. Rate limiting and IP addresses

To reduce abuse, processing and URL-fetch endpoints apply rate limits. Current configured limits are about 30 process requests per minute and 15 fetch requests per minute per client IP (within a rolling window).

Rate-limit state is stored as hashed records on the server. The IP address is used to compute those records so limits can be enforced.

10. Server and error logs

Like most websites, the hosting environment may generate standard access logs. PHP error logging is enabled in the application bootstrap for operational debugging. These logs are used to keep the service working and are not an image gallery.

11. Analytics and advertising

Advertising is currently disabled in site configuration (ads.enabled = false). No advertising slots are rendered while that setting remains off.

JPG Smaller does not currently ship a first-party analytics script in the public JavaScript bundle. If analytics or advertising are enabled later, this Privacy Policy will be updated to describe the additional collection before those features are relied on.

12. Third-party services

The public site loads fonts from Google Fonts (Google Fonts CSS/font hosts referenced in the page header). Your browser may contact those hosts when loading pages.

Hosting, DNS, and TLS are provided by the production host environment for https://jpgsmaller.com. Those providers process connection data as needed to deliver the website.

JPG Smaller does not currently integrate a separate user-analytics SaaS or advertising network in the enabled configuration.

13. Contact messages

If you email [email protected], we receive the content of your message and your email address so we can respond. There is no website contact form that stores messages in a database.

14. Data security

Production is intended to run over HTTPS. The application uses upload validation, CSRF tokens, rate limiting, and private temporary storage paths that are not meant for public directory listing. No transmission or storage method is perfectly secure.

15. Children’s privacy

JPG Smaller is a general-purpose image utility and is not directed at children. Do not use the service to upload personal images of minors in violation of applicable law or platform rules that apply to you.

16. International users

The service may be accessed from multiple countries. Processing occurs on the servers that host JPG Smaller. If you are not comfortable with temporary processing of image files on those servers, do not upload them.

17. Your choices and requests

You can stop uploading images at any time. Because temporary files are identified by random tokens and cleaned automatically, we generally cannot locate a specific past upload from a vague description after it has been deleted.

For privacy questions about this policy or current processing behavior, email [email protected]. Include enough detail for us to understand your request. Also see the Terms of Use.

18. Changes to this policy

We may update this Privacy Policy when the product behavior changes. The “Last updated” date at the top reflects the current published version. Continued use after an update means you should review the revised policy.

19. Contact

Privacy contact: [email protected]
Web: Contact page