Privacy Policy

Last updated: June 11, 2026

1. The short version

Your images never leave your device. All core processing (resize, crop, compress, convert, watermark) runs in your browser. We do not receive, store or analyse your photos. The only exception is an optional AI feature, where the single image you choose is sent to the AI provider for processing and is not stored by us.

2. Data controller

The controller of your personal data is the operator of ImageResizerly.com (Poland). Contact: biuro@s90.pl.

3. What we collect and why

  • Account data (email address, password hash, language preference) — to provide your account. Legal basis: contract.
  • Usage events (page visits, number of images processed, operations used, country, browser/OS type, IP address, an anonymous identifier cookie) — to enforce fair-use limits, prevent abuse and understand aggregate usage. Legal basis: legitimate interest. Raw events are deleted after 90 days; only anonymous daily aggregates are kept longer. We never log image content or file names.
  • Payment data — purchases are processed by Paddle as merchant of record; we receive only the transaction status and identifiers, never your card details. See Paddle's privacy policy.
  • Local storage in your browser (theme, last tool settings, local presets, local statistics) — stays on your device and is not sent to us.

4. Cookies

We use only functional cookies: a session cookie (login), an anonymous identifier used for daily fair-use limits, and your interface preferences. We do not use advertising cookies. Analytics, if enabled, is configured to respect "Do Not Track".

5. Recipients

Hosting provider (EU), Paddle (payments), and — only when you explicitly use an AI feature — the relevant AI processing provider. We do not sell personal data.

6. Your rights (GDPR)

You may request access, rectification, erasure, restriction, portability, or object to processing, and lodge a complaint with a supervisory authority (in Poland: PUODO). You can delete your account yourself on the Account page — this erases your personal data. For anything else, email biuro@s90.pl.

7. Retention

Account data: until you delete the account. Raw usage events: 90 days. Billing records: as required by tax law. Anonymous aggregates: indefinitely (they cannot be linked to you).

8. Changes

We will post any changes to this policy on this page with an updated date.