Privacy Policy — downsizer
This Privacy Policy explains how downsizer ("the Service", "we", "us") collects, uses, stores, and discloses information when you use the Service. The Service is provided by an individual operator (no company). There is no email or company address provided — a Twitter contact link is provided below.
What information we collect
We intentionally collect very little personal information. The types of information we collect are limited to:
- • IP address — collected automatically for security, abuse prevention, and troubleshooting.
- • Analytics data via PostHog — event and usage analytics (pages visited, feature usage, timestamps, aggregated metrics). PostHog may set cookies or local storage items.
- • Files you upload (images) — images uploaded for downsizing are stored temporarily on Amazon S3 (see below).
How we use the information
We use the collected information only for the following limited purposes:
- • To provide the image downsizing functionality (process the file you upload).
- • To protect the Service from abuse (rate limiting, blocking malicious requests) using IP information.
- • To understand and improve the Service via PostHog analytics.
- • To comply with lawful requests and to investigate security incidents.
Image storage, encryption, & deletion
Uploaded images are stored on Amazon S3 for up to 24 hours (one day). While these images are stored on S3 they are not encrypted by the Service — access control is applied, but the files themselves are not encrypted at-rest by this service configuration. After the 24-hour retention period we delete the files from our primary S3 buckets.
Important: residual copies may persist briefly in provider logs, caches, or backups under AWS's retention and backup policies. We make reasonable efforts to remove files from active storage and request removal from backups in accordance with the storage provider's procedures, but cannot absolutely guarantee instant or complete eradication from all provider-managed backups.
Retention of IP and analytics
IP addresses are retained for operational, security, and abuse-prevention purposes (typically up to 30 days) and then deleted or anonymized unless required by law. PostHog analytics data is retained according to the PostHog configuration and PostHog's policies — we do not control their independent retention settings.
Third-party services
The Service uses the following third-party providers:
- • PostHog — analytics provider.
- • Amazon Web Services (S3) — temporary file storage.
These third parties process data on our behalf and are governed by their own privacy policies; please consult their documentation for details.
Cookies and client storage
We do not set marketing cookies. PostHog may set cookies or use local storage for analytics. You can clear or block these in your browser, but doing so may affect analytics reporting.
No accounts, no email marketing
There is no account creation, no signup, and no newsletter. We do not collect email addresses for marketing.
Children
The Service is not intended for children under 18. Do not upload images of minors.
Security & limits
We take reasonable technical and organizational measures to protect data we hold. However, the Service does not provide encryption of uploaded images while stored on S3, and no system is perfectly secure. We cannot guarantee absolute security.
Your choices and rights
- • If you do not want your IP or usage to be processed, do not use the Service.
- • You may request deletion of a specific uploaded image before the 24-hour retention period ends by contacting us on Twitter.
No sale of personal information
We do not sell personal information.
Liability, disclaimer, and indemnification
To the maximum extent permitted by law, the Service is provided "as-is" and we disclaim all warranties. You are solely responsible for the content you upload. You agree to defend, indemnify, and hold harmless the service operator (the individual) from any claims, losses, liabilities, costs, or expenses (including reasonable attorney fees) arising out of your use of the Service, your uploads, or your breach of this Privacy Policy or applicable law.
We do not accept responsibility for legal claims arising from content uploaded by users, nor for losses caused by your use of the Service (including data loss, unauthorized access by third parties, or any direct, indirect, incidental, or consequential damages), except where prohibited by applicable law.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" above. Continued use after changes constitutes acceptance of the updated policy.
Contact
This Service is operated by an individual and no company email or postal address is provided. For privacy requests or contact, a Twitter handle is provided below