Image Tools

Privacy policy

Last updated:

Controller for data processing

  • NextAppLab
  • USAMA IBRAHIM ZAGOUT
  • Sole proprietor
  • Paulsborner Straße 21A
  • 10709 Berlin
  • Germany
  • kontakt@nextapplab.net
  • VAT ID: DE255385673

1. Image processing happens on your device

Your images are decoded and re-encoded in your browser. The tool does not upload image content, file names, dimensions or EXIF data to a server. It also does not store images in local storage, IndexedDB or a service worker cache.

When you download a result, the file is created by your browser. Choosing “Download all” builds a ZIP archive on your device as well.

2. Hosting and connection data

The website consists of static files delivered through Cloudflare’s network. When a page is opened, technical connection data arises: IP address, time, requested address, amount of data transferred, browser type and operating system, referring page, and connection security details. This data is required to deliver the page, to repel attacks and to detect faults. The legal basis is our legitimate interest in a secure, working service (Art. 6 (1) (f) GDPR, Recital 49).

We keep no server log of our own and do not store this data. It arises at Cloudflare. Under Cloudflare’s contractual terms, Cloudflare processes connection data partly as our processor and partly as a controller in its own right, for example to defend its network against attacks. How long Cloudflare keeps this connection data is governed by Cloudflare’s privacy information and terms; we do not set that period.

Cloudflare’s terms and privacy information apply to processing by Cloudflare. In its privacy policy, Cloudflare states that it is certified under the EU-US Data Privacy Framework. When Cloudflare processes data, it may be transferred to countries outside the EU, in particular the United States.

This website sets no cookies of its own and uses no analytics, crash reporting or tracking pixels. It does not create a user account.

3. Contact by email

If you write to the address given in the legal notice, we receive your sender address, the subject, the message text and the time. We use this information solely to answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR where your enquiry concerns a contract or steps prior to entering into one, and otherwise our legitimate interest in answering enquiries (Art. 6 (1) (f) GDPR).

Incoming messages are received via Cloudflare Email Routing and forwarded to a mailbox at Google (Gmail). The message content is therefore transmitted to these two service providers and may be transferred to third countries. We delete enquiries once they have been dealt with, unless statutory retention obligations apply.

4. Advertising

Advertising is switched off in this build. No advertising script is loaded and no advertising cookie is set.

If advertising is enabled later, Google AdSense may be used together with a Google-certified consent management platform. Ad scripts would then load only after the consent required in your region, and you would be able to change or withdraw that choice at any time. The policy will name the provider and the purposes before that happens. Rejecting consent or using an ad blocker does not affect the tools.

5. No transfer of your images to third parties

Because image processing happens locally, no image data reaches the host, an advertising provider or any other third party through this tool. This statement concerns the tool itself; it does not mean that using the website produces no network requests at all — the page files and, if enabled, advertising scripts still have to be loaded.

6. Your rights and contact

Subject to the conditions set out in each provision, you have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection (Art. 21 GDPR). Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. We do not currently ask for consent, so there is nothing to withdraw.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR) — in the EU or UK in particular the authority of your habitual residence, place of work or the place of the alleged infringement. The authority responsible for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information). Questions about this website can be sent to the contact address on the contact page.

You are under no statutory or contractual obligation to provide personal data. Without the technical connection data, however, the website cannot be delivered, and without your sender address we cannot reply to an e-mail. No automated decision-making, including profiling (Art. 22 GDPR), takes place.

The controller’s contact address is given at the top of this page and in the legal notice.