Privacy Policy

Last updated 22 September 2026

Your images

Every one of the 165 tools on this site decodes, edits and re-encodes your files with JavaScript and a <canvas> element inside the page you are looking at. There is no endpoint to upload an image to — not a private one, not a temporary one. Nothing you drop, paste or open is transmitted anywhere, no file name is recorded, and after the page has finished loading you can disconnect from the network entirely and the tools keep working. That is the one claim this site is actually built around, and it is checkable: open your browser's Network panel and run any tool.

Cookies

No analytics, no advertising, no third-party cookies. Two first-party cookies exist, and both are set only if you create an account:

• pngtk_sess — your sign-in session. HttpOnly, SameSite=Lax, expires after 90 days. Deleting it signs you out; so does the Sign out button.
• pngtk_csrf — a random value that proves a form submission came from this site rather than another one. It identifies nothing and is not readable across domains.

A third, pngtk_rc, exists for five minutes immediately after signup, purely to carry your one-time recovery code across a single redirect to the page that shows it. It is deleted the moment that page renders.

If you never create an account, this site sets no cookies at all.

If you create an account

An account is entirely optional. Nothing is gated behind it: all 165 tools, full batch sizes, no watermarks, signed in or not. It exists to carry three lists between your browsers. What is stored:

• Your email address. Used to identify the account. No message has ever been sent from this site — there is no mail relay attached to it.
• A hash of your password (bcrypt) and a hash of your recovery code. Not the values themselves; they cannot be read back out, by us or by anyone who obtained the database.
• Whether you ticked the marketing box, plus the exact wording you agreed to and the date. Untick it on your account page at any time.
• Your starred tools, your saved tool presets, and the last fourteen tools you opened. Slugs and setting values — quality=70, not your file.
• One row per signed-in browser: when it signed in, when it was last seen, and a shortened user-agent string, so you can recognise and revoke sessions.
• A keyed hash of your IP address — never the address itself — used to rate-limit sign-in attempts. The salt makes the hash useless to anyone who obtains it.

That is the complete list. Download all of it as JSON from your account page whenever you like, and delete the account from the same page — the rows are deleted immediately, not flagged for later.

Local storage

No image content is ever written to localStorage, sessionStorage or IndexedDB. The keys this site does write, all in localStorage:

• theme — light or dark.
• pngtk.stars, pngtk.recents, pngtk.presets — the same three lists an account syncs. Signed out, they live here and nowhere else, which is why they work with no account at all.
• pngtk.nudged — a flag so the one line suggesting an account is shown once and never again.
• lead_prompt_v1 — legacy, from the email form that used to appear here. Harmless; clear it with the rest.

Clearing site data in your browser removes all of them.

Third parties that see your IP

Your browser loads a few files from other hosts, which necessarily see your IP address. None of them ever see your images, because your images never leave the tab.

• Google Fonts — fonts.googleapis.com and fonts.gstatic.com, for Geist and JetBrains Mono.
• jsDelivr — cdn.jsdelivr.net, for four libraries, each fetched only when a tool that needs it is actually run: jszip (the "download all as .zip" button), jspdf (PNG to PDF), exifreader (metadata inspection) and libheif-js (HEIC decoding outside Safari).
• Cloudflare, which fronts this domain, and the origin host behind it. Standard web-server fields — IP, user-agent, URL, timestamp — used for debugging outages and nothing else.

What this site does not do

• No analytics of any kind. No Google Analytics, no Plausible, no Mixpanel, no Hotjar, no self-hosted counter. There is genuinely no measurement of what you do here.
• No advertising, no pixels, no fingerprinting, no session recording.
• No selling, renting or sharing of anything with anyone.
• No modal popup demanding your email before you can use a tool. There was one, for three weeks in September 2026, appearing five seconds after load. It was a mistake and it is gone.

Contact

Privacy questions, or a deletion request you would rather send by email than click: [email protected]. Bug reports welcome too, especially for anything on this site that calls home and shouldn't.