1. Who is responsible
ImageEditor is operated by LUO YAO, an individual operating under the ImageEditor brand. We determine how information is used for the Service described here. Contact rrjjffgaby@gmail.com for privacy questions, account deletion, shared-image removal or other data requests. This policy applies to imageeditor.cc and its tools.
2. Images you edit and share
Images you select for editing, their filenames, editing settings and generated results are processed in your browser. We do not automatically upload these files to ImageEditor or an external AI service. The tools do not send your image pixels or filenames to our analytics. The Service does not use your images to train AI models. Unsaved working files are not an online backup and may disappear when the page closes or your browser releases memory.
Creating an optional share link uploads the exported result, its content type and an expiry value to hosted object storage. We do not require your original source image or original filename for that upload. The export may itself contain personal information, visible text or other content you included. Anyone who obtains the link can access and download it; treat it as public-to-link-holders, not as a private account document.
Share access expires seven days after creation. Expired content is removed through automatic cleanup, which may occur after the exact expiry time; expiry blocks access even if physical cleanup has not yet completed. Copies already saved by recipients cannot be recalled. For earlier removal, email rrjjffgaby@gmail.com with the share URL and enough information to establish your request. Do not email the source image unless needed for an issue you choose to discuss.
3. Accounts and support messages
If you sign in, we use Supabase authentication to maintain an account identifier, email address, sign-in/provider information, and profile name or avatar supplied through your chosen provider. Google sign-in may provide your email, display name and profile-image URL. Loading a Google-hosted avatar sends an ordinary image request to Google. We use this information for authentication, displaying your account, account-linked access and support. We do not request your Google password or access to your Gmail messages, contacts or Drive files.
If email verification is available, the authentication service and its email provider process your email and verification messages to complete sign-in. Session cookies keep you signed in. Signing out ends the local session; it does not delete the account record or edited images still in the open browser page.
If you email us, Google’s Gmail service and ImageEditor receive your sender address, message and any attachments you choose to send. We use them to answer the request, resolve disputes and maintain relevant support records. Send only information needed for your request.
4. Technical data and purposes
The hosting and security infrastructure processes information needed to deliver and protect the website: IP address, browser or user-agent information, request URL, time, response status and security signals. IP addresses may be used for abuse prevention and rate limits. Our crawler diagnostics record the requested sitemap/robots path, response status and an agent category, rather than a private account profile. Infrastructure providers may maintain their own operational logs.
We use information to deliver the tools and optional sharing, authenticate users, prevent abuse, diagnose faults, answer requests and meet applicable legal obligations. Where a legal basis is required, these purposes rely on providing the requested service, legitimate interests in security and operation, legal obligations, or consent for optional analytics. We do not sell your personal information or use it for cross-site targeted advertising.
5. Cookies, local storage and analytics choices
Essential sign-in cookies support authentication. A first-party language cookie remembers English or Chinese, and local storage remembers your statistics choice. These preferences can be cleared in your browser; clearing authentication cookies may sign you out.
Google Analytics 4 is loaded on tool pages only after you choose to allow statistics. If allowed, Google may use first-party analytics cookies to distinguish browsers and sessions and process device/browser information, approximate location, page and session activity. ImageEditor sends normalized public tool URLs, a limited referral category, tool actions, file counts and output formats. We do not intentionally send image contents, filenames, account names, account email addresses, sign-in tokens or private share-link identifiers to Analytics. Advertising personalization and Google signals are disabled in our integration.
You can reject or withdraw analytics permission without losing access to the tools. Use the controls below or Analytics preferences in the tool-page footer. Withdrawal stops future ImageEditor analytics collection in that browser and removes accessible first-party Google Analytics cookies; it does not automatically erase information already processed by Google. Browser blockers and regional connectivity may also prevent measurement. These legal pages do not load Google Analytics.
Analytics on this browser
Your choice is stored on this device.
6. Service providers and international processing
We use the following services for the limited purposes described here. They may process information in countries outside your own, under their applicable terms, safeguards and privacy notices. A provider’s own websites and account services have their own notices.
- OpenAI Sites and Cloudflare: website hosting, delivery, security and storage of optional shared exports. OpenAI privacy notice · Cloudflare privacy notice.
- Supabase: authentication and account records. Supabase privacy notice.
- Google: Google sign-in, hosted profile images, Gmail support communications, and Google Analytics when allowed. Google privacy notice · Google Analytics opt-out add-on.
When you start checkout, we send your signed-in account email to Waffo Pancake to prefill the checkout email; you can change it there. Waffo provides hosted checkout as merchant of record. Payment and billing details entered at its checkout are processed by Waffo and its payment partners. ImageEditor receives the order reference, plan, payment status, paid period and the minimal account binding needed to grant access, reconcile refunds and manage renewal. Full card numbers and security codes are not stored by ImageEditor. Checkout identifies the payment provider and applicable privacy information before you submit payment.
We may also disclose limited information where legally required, to protect rights and security, or at your direction, such as when you share a link. We do not make your account email public on the website.
7. Retention and security
Local working images remain under your browser’s control. Share-access and cleanup timing are described above. Account information is kept while the account is maintained and may be removed following a verified deletion request. Support, security and transaction information may be kept where needed to resolve the request or dispute, prevent abuse, maintain required records or comply with law. Provider logs and backups can have separate retention periods; deletion from active systems does not promise immediate removal from every backup.
We use HTTPS, access controls and service-provider security features to protect information. No transmission or storage system is perfectly secure. Do not use a share link for sensitive material you would not want link holders to access. We will handle deletion and retention requests in accordance with applicable requirements and explain any information we must retain.
8. Your choices and rights
Depending on applicable law, you may request access, correction, deletion, a copy of your information, restriction or objection to processing, or withdrawal of consent. Email rrjjffgaby@gmail.com from your account address where possible. Include only the account or share reference needed to locate the information. We may ask for proportionate verification; do not send passwords or payment-card details. We will respond within the period required by applicable law.
You can use basic tools without an account, decline analytics, stop using optional sharing, sign out, or clear site storage. Withdrawing consent does not affect processing already lawfully performed. You may also complain to the data-protection authority available in your jurisdiction. An account deletion request does not itself cancel any future active subscription; cancel renewal in billing or contact support first.
9. Children
The Service is not directed to children under 13, or a higher age threshold where local law requires it. We do not knowingly collect their account information. If you believe a child has provided information inappropriately, contact support so we can investigate and remove it where required. A parent or guardian should supervise any use for which permission is legally required.
10. Updates and contact
We will update the effective date when this policy changes. Material changes to how we handle information will be explained through the Service or another appropriate notice before the new practice applies where required. For questions or privacy requests, contact rrjjffgaby@gmail.com. Operator: LUO YAO, trading as ImageEditor.