Privacy Policy

Account Information: When you create an account, we collect your username, email address, and password (stored securely hashed). Account creation is optional.

Upload Data: When you upload images, we store the image files along with metadata such as file name, size, type, and upload timestamp. We assign a unique identifier to each upload.

Usage Data: We automatically collect certain information when you use the Service, including your IP address, browser type, operating system, referring URLs, pages visited, and timestamps. This data helps us operate and improve the Service.

Cookies: We use essential cookies for authentication and session management. We use Cloudflare Turnstile for bot protection, which may set its own cookies.

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Process your image uploads and manage your account.
• Respond to support requests and communicate with you.
• Detect and prevent abuse, fraud, and violations of our terms.
• Generate anonymous, aggregated analytics to improve the Service.
• Comply with legal obligations.

Images are stored on Cloudflare R2 cloud storage with encryption at rest. Account data is stored in a PostgreSQL database with encrypted connections. Passwords are hashed using bcrypt and are never stored in plaintext.

We implement industry-standard security measures to protect your data, but no method of transmission or storage is 100% secure.

We do not sell, trade, or rent your personal information to third parties. We may share data only in the following circumstances:

• Service Providers: We use Cloudflare for CDN, storage, and bot protection. These providers process data on our behalf.
• Legal Requirements: We may disclose information if required by law, court order, or government request.
• Safety: We may share information to protect the rights, safety, or property of ImgLink, our users, or the public.

If you are a resident of the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate personal data.
• Right to Erasure: You can request deletion of your personal data ("right to be forgotten").
• Right to Restrict Processing: You can request that we limit how we use your data.
• Right to Data Portability: You can request your data in a structured, machine-readable format.
• Right to Object: You can object to the processing of your personal data.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us. We will respond within 30 days.

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

Uploaded images by guest users (without accounts) are retained indefinitely unless removed for policy violations or upon valid request.

Server logs containing IP addresses are retained for up to 90 days for security and abuse prevention.

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

Your data may be processed and stored in countries outside your country of residence, including countries that may not provide the same level of data protection. We use appropriate safeguards for international transfers, including Cloudflare's data processing agreements.

We may update this Privacy Policy from time to time. We will indicate the date of the most recent update at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

For privacy-related inquiries or to exercise your data rights, please contact us or email privacy@imglink.cc.