Privacy Policy

This privacy policy explains what personal data is processed when you use imgpico (imgpico.com) and why. We designed the service so that we collect as little data as possible.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is the provider named in our Legal Notice. You can reach us at hello@apposaurus.de.

2. Your images stay on your device

All image tools on imgpico run locally in your web browser using standard browser features. When you select or drop a file, it is read into your browser's memory only. The file is never transmitted to our servers or to any third party, and the edited result is generated on your device. We therefore have no access to the images you edit, and we do not store them.

AI-powered tools

Some tools, such as Remove Background and the face detection in Blur & Pixelate, use machine learning models that also run inside your browser. The models and their runtime are served by imgpico itself, like any other file of this website, and are cached by your browser. No external AI service is contacted for this processing, and your image is never sent to us.

3. Server log files

When you visit the website, our hosting provider automatically records technical information in server log files. This includes your IP address, the date and time of the request, the pages requested, the referring URL, your browser type and operating system. This data is required to deliver the website securely and reliably (Art. 6 (1) (f) GDPR). Log files are deleted automatically after a short retention period unless they must be kept to investigate a security incident.

4. Hosting

The website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Our server is located in Germany. A data processing agreement in accordance with Art. 28 GDPR has been concluded with Hetzner. Hetzner processes the technical data described above on our behalf to deliver and secure this website. Further information is available in Hetzner’s privacy policy.

5. Cookies and local storage

imgpico does not use tracking cookies and does not set any cookies for advertising purposes. The site may use technically necessary browser storage to remember settings you choose, such as a preferred output format. AI model and runtime files may also be cached by your browser. Your selected images are not transmitted to us.

6. Analytics

We use our own Umami instance at analytics.apposaurus.de to understand how often our pages and tools are visited and to improve the website. The instance is operated by the controller named above and hosted by Hetzner Online GmbH in Germany under the data processing agreement described in section 4. We do not use Umami Cloud or advertising services.

The analysis records page paths and titles, the time of a visit, the referring page, browser, operating system, device type, screen resolution and browser language. The IP address is technically transmitted when a request reaches the analytics server. Umami uses it to derive an approximate location (country, region and city) and to distinguish visits with a hash-based identifier. The IP address itself is not stored in the Umami analytics database. The server logs described above are separate from these statistics.

Our tracker excludes query parameters and URL fragments from page and referrer URLs. It does not set tracking cookies or store a visitor ID in your browser. We do not send your images, file names, image metadata or editor inputs to Umami. We do not configure session recordings or link visits to named user accounts.

We use the default retention setting of self-hosted Umami: analytics records have no automatic expiry and remain stored until we delete them manually. The changing visit identifiers do not automatically delete the underlying records.

Where personal data is processed, the legal basis is our legitimate interest in measuring usage and improving the website (Art. 6 (1) (f) GDPR). You can object to this processing. The tracker respects your browser's Do Not Track setting. You can also disable future analytics requests for this website in this browser using the button below. This saves only your opt-out preference in local browser storage; it does not delete statistics already collected.

7. Contact by email

If you contact us by email, we process the data you provide in order to respond to your request (Art. 6 (1) (b) and (f) GDPR). Your message is deleted once your request has been dealt with and no statutory retention obligations apply.

8. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15),
• have inaccurate data corrected (Art. 16),
• have your data erased (Art. 17) or its processing restricted (Art. 18),
• data portability (Art. 20),
• object to processing based on legitimate interests (Art. 21),
• lodge a complaint with a supervisory authority (Art. 77).

9. Changes to this policy

We may update this policy when the website changes or when legal requirements change. The current version is always available on this page.