Privacy policy

ExactKB is a static website. The compressor runs in your browser. Image bytes are not uploaded to ExactKB servers — we do not operate an image API, object store, or account database.

What the tool does with a photo

• Your browser reads the file you select via the File API.
• HEIC files are decoded with a WASM library shipped as part of the page, not sent to a conversion host.
• The bitmap is drawn to a canvas and re-encoded. That redraw removes EXIF, including GPS.
• Downloads and ZIP archives are created locally (JSZip) and saved through the browser download prompt.
• When you close the tab or tap Clear, in-memory object URLs are revoked. We never receive a copy to delete.

You can verify the privacy claim by loading the site once, disconnecting the network, and compressing a photo. After assets are cached, no image data needs to leave the device. First-load fetches HTML, CSS, JS, and self-hosted fonts from this origin — never your photograph. An ads script is optional and commented out until you add a publisher ID.

What this site may collect besides images

The hosting provider (for example Cloudflare Pages) receives standard web logs: IP address, user agent, referrer, and the URL of the page you requested. Those logs are for security and reliability. They do not include the contents of files you compress.

If Google AdSense is later enabled, Google may set advertising cookies and collect device/browser data according toGoogle’s advertising policy. Ad slots on ExactKB are labeled “Advertisement” and are not part of the compressor. We will not use ads that look like download buttons.

If a privacy-friendly analytics script is added later, it will be named here. This MVP ships without analytics.

Cookies

ExactKB itself does not set cookies to run the compressor. Third-party ads, if enabled, may set cookies. You can block them in the browser. The tool keeps working.

Advertising, AdSense, and the EEA / UK

This site ships with labeled advertisement placeholders only. The Google AdSense script is commented out in the page layout until a publisher ID is added. When ads are enabled:

• Units appear below the compressor, in long-form articles, or in the footer — never as a download or “compress” control.
• Google may use cookies or similar technology as described in its advertising policies.
• For visitors in the European Economic Area and the United Kingdom, personalized ads will not be enabled until a Google-certified consent management platform (CMP) is installed. That is an operator responsibility, documented in docs/ADSENSE.md.

Blocking ads or cookies does not change how images are processed. The encoder never depends on an ad request.

Children

The site is a general-purpose utility. We do not knowingly collect personal information from children. Do not email us photos of minors.

International visitors

Because images never reach our servers, we do not transfer photo data across borders. Hosting logs may be processed in the region of the CDN edge you hit.

Contact

Privacy questions: hello@exactkb-tool.pages.dev. See also contact.

What we ask of you

Do not email us photographs of identity documents. Use the on-page tool. If you include personal data in a support message (an application number, a portal URL with a session token), we will treat it as unnecessary and ask you to resend without it.

This policy will be updated on this URL when advertising, analytics, or a CMP actually ships. The date at the top of the page is the effective date. Hosting logs are retained by the CDN according to that provider’s policy, not by an ExactKB application database — we do not operate one.