Privacy
Not a promise.
Something you can check.
Most privacy pages ask you to trust a policy. This one describes what the code does, lists every request the site makes, and tells you how to confirm each line yourself in about thirty seconds.
Opened holiday.heic — 4000 × 1848, 1.2 MB
What happens when you use a tool
- 1. You choose a file. The browser hands the page a reference to it through the File API — the same mechanism as attaching a file to an email draft.
- 2. The page decodes it into memory using Canvas or WebAssembly. Nothing is written to disk and nothing is sent.
- 3. The work happens — re-encoding, resizing, or a model running on your GPU — on your device.
- 4. The result is handed back to your browser as a download. Close the tab and every copy is gone.
There is no step where a server is involved, because there is no server. ImgKit is a static site: once the page has loaded, it has everything it needs.
Every request the site makes
This is the complete list. The site's Content-Security-Policy header names the only hosts the page is permitted to contact at all, and your browser enforces it — you can read it in the Network tab under the response headers for any page here.
| Request | Goes to | When | What it carries |
|---|---|---|---|
| The page itself | imgkit.xyz (hosted by Vercel) | When you open a page | Your IP address and browser, as with any website. |
| Page-view counting | imgkit.xyz/_vercel/insights | On each page view | The page path, referrer, country, browser and device type. No cookie, no cross-site identifier. |
| AI model files | huggingface.co, cdn.jsdelivr.net, tessdata.projectnaptha.com | The first time you open an AI tool | Nothing of yours. These are downloads — the model comes to you, cached for next time. |
| Directory badges | listbulb.com, publishyoursaas.com, nicklaunches.com | On the home page only | Three small images in the footer. Those hosts can see that a visit happened. |
| The contact form | api.emailjs.com | Only when you press Send | What you typed, and your email address if you gave one. Nothing else, and never an image. |
Never sent, in any tool
- The image you choose — no tool sends it anywhere, at any quality, at any size.
- Its filename, its dimensions or its EXIF data.
- A thumbnail, a preview or a hash of it.
- Anything at all once the page has loaded and you are working offline.
Kept on your device
- AI model files, in a browser cache called
imgkit-models-v1, so the download happens once. Clearing your site data removes it. - Nothing else. No cookies are set, and no images or settings are stored between visits.
How to check all of this yourself
The quick test
Open any tool, then turn off your wifi or switch on aeroplane mode. Compress, convert or resize an image. It still works — which it could not if the file were going anywhere.
The thorough test
Open your browser's developer tools, go to the Network tab, and clear it. Now pick an image and run a tool. No request appears while it works — there is nothing uploading, because there is nowhere to upload to.
If you find something on this page that doesn't match what your browser shows you, please tell me — that would be a bug in the page, and I'd want to fix it the same day. More about the project on the about page.