Privacy Policy

Your images are never uploaded

This is the whole point of DropKB, not a policy detail. Compression runs inside your browser using its own image encoder. Your files are read from your disk into your browser's memory and never sent to us or anyone else. We cannot see them, we do not store them, and there is no copy of them to lose in a breach.

You can verify this yourself: open your browser's network tab and compress something. No request carries your image.

What we do collect

Very little, and only when you choose to sign in.

• If you sign in: your email address and a Google account identifier, so we know which account holds which plan. Sign-in is handled by Google — we never see or store a password, because there is no password.
• If you subscribe: payment records from Razorpay (amount, status, payment id). Card details go to Razorpay and never touch our servers.
• A count of images compressed: a single number per day, with nothing attached to it. Not filenames, not sizes, not who did it — just a total, so we know whether the site is being used.

Metadata is stripped as a side effect

Re-encoding an image produces a clean file with no metadata attached. The GPS coordinates, camera model and timestamp your phone recorded are not carried into the version you download. This is useful — photos from a phone often carry the location they were taken — but it also means you should keep your original if you need that data.

Who else is involved

• Google (Firebase Authentication) — handles sign-in.
• Razorpay — handles payments and subscriptions.
• Cloudflare — serves this site.

None of them receive your images, because your images never leave your device.

Deleting your data

Email us and we will delete your account and its records. Payment records are kept as long as tax rules require, which is the one thing we cannot delete on request.

Contact

Questions about any of this: hello@dropkb.com.