Privacy Policy
Last updated: August 14, 2026
The short version
Your files are processed inside your browser and never uploaded to us. We collect anonymous usage analytics so we can improve the tools. We don't sell data, ever. Read on for the detail.
1. Who we are
ImageGates ("we", "us", "our") is a free image and document toolkit operated by Abdulkeni Abdelwahid, based in Toronto, Ontario, Canada. You can reach us at any time at hello@imagegates.com. We are an independent publisher and not affiliated with any government agency or document-issuing authority.
2. What data we collect
We collect two narrow categories of information:
- Anonymous usage analytics. Page URL, referrer, approximate country (derived from IP and discarded after geolocation), device class (mobile/desktop), browser, language, screen size, and which tool features are used. This data is never linked to your identity.
- Voluntary contact data. If you email us or submit our contact form, we receive the name, email and message you provide. We use it only to reply.
We do not collect: the contents of your images, PDFs or documents; account passwords (there are no accounts); payment information (the tools are free); precise GPS location; or any health, biometric or financial data.
3. How file processing actually works
Every tool on ImageGates uses client-side JavaScript and WebAssembly to do the work directly inside your browser. When you compress, resize, convert, crop, rotate, blur, remove a background, or convert a PDF, your file is loaded into your browser's local memory, processed, and the result is offered to you as a download. At no point is the file uploaded to our servers, a third-party API, or any cloud storage bucket. When you close the tab or navigate away, the browser releases the memory and the file is gone.
For passport and visa photo compliance checks, we run a small machine-learning model (face detection and background analysis) in the browser via WebAssembly. The model files themselves are downloaded from our static CDN; your photo is never sent anywhere.
4. Cookies & local storage
We use a small set of first-party cookies and localStorage entries for:
- Remembering UI preferences (theme, tool defaults, recently used settings).
- Anonymous analytics (Google Analytics, with IP anonymization enabled).
- Frequency-capping ads served by Google AdSense.
You can clear or block these at any time from your browser settings. The site remains fully functional without cookies — only personalization is affected.
5. Third-party services
We use a small, deliberate set of third parties:
- Google Analytics 4 — anonymized usage analytics. Google's privacy policy.
- Google AdSense — display advertising. Google may use cookies to serve ads based on a user's prior visits to this and other sites. You may opt out of personalized advertising in Google's Ads Settings.
- Cloudflare — CDN and DDoS protection. Cloudflare may process IP addresses to filter malicious traffic.
- External reference links — when we link to an official source or third-party reference, that site may process standard request metadata under its own policy.
We do not share, sell, rent or trade any user information with third parties for marketing purposes.
6. International data transfers
Analytics data is processed by Google in jurisdictions including the United States and the European Union. Where required by law, transfers from the EU/UK rely on Standard Contractual Clauses adopted by the European Commission. Because the personal data we send is minimal (anonymous analytics events), the residual privacy risk is low.
7. Your rights (GDPR, CCPA, PIPEDA)
Depending on your jurisdiction, you may have the right to access, correct, delete, port, or restrict the processing of personal information we hold about you, and to object to certain processing. Since we don't store identifiable file content or user accounts, most requests are simple. To exercise any right, email hello@imagegates.com. We will respond within 30 days.
8. Data retention
Anonymous analytics events are retained for up to 14 months and then automatically deleted. Email correspondence is retained for as long as needed to handle your request, and for up to 24 months thereafter for support history. We retain no copies of files you process.
9. Security
ImageGates is served exclusively over HTTPS with HSTS enabled. Because file processing happens locally, the main attack surface — server-side storage of user files — does not exist. Our admin systems use multi-factor authentication and least-privilege access controls.
10. Children's privacy
ImageGates is a general-audience site and is not directed at children under 13 (or under 16 in the EU/UK). We do not knowingly collect personal information from children. Parents who believe their child has provided personal information to us should email hello@imagegates.com and we will delete it.
11. Changes to this policy
We may update this policy as the law or our practices evolve. Material changes will be flagged at the top of this page for at least 30 days. The "Last updated" date above always reflects the current version. Continued use of ImageGates after a change constitutes acceptance of the updated policy.
12. Contact
Questions, complaints or data-rights requests:
hello@imagegates.com
See also: our Terms of Service, About page, and Contact form.