Privacy policy

Last updated: 2 November 2026

This policy explains what personal data img2img Browser Extension (“img2img”, “we”) collects when you use the img2img website, Chrome extension and hosted processing service, and what we do with it. We are responsible for that data.

Images you process

• When you process an image on our servers, the extension sends us the image and the settings you chose.
• Images are processed in memory. The result is kept in memory for up to 10 minutes so the extension can collect it, then deleted.
• Images are never written to logs, never stored in our database and never used to train AI models.
• Every image is checked automatically for adult content before processing. The check runs on our servers, and nobody looks at your images.
• If you connect the extension to your own processing server instead, your images go only to that server, never to us.

What we collect

• Account details: your name, email address and a securely hashed password.
• API keys: a hashed copy of each key (we can’t read the key itself), its name, and when it was last used.
• Usage records: for each job, the edit used, its status, the credits it cost and when it ran. These records contain no images.
• Purchases: the pack you bought, its price and the payment status. Your card or bank details go straight to our payment provider; we never see or store them.
• Technical data: standard server logs (IP address, browser and the pages requested), kept for security and troubleshooting.
• Cookies: only the cookies the website needs to keep you signed in and protect forms. We don’t use advertising or tracking cookies.

Why we use it

• To provide the service: processing your images, keeping your credit balance and showing your history (performance of our contract with you).
• To take payments and keep the financial records the law requires (legal obligation).
• To prevent fraud and abuse and to keep the service secure (legitimate interests).
• To send emails about your account, such as address verification, password resets and important changes. We don’t send marketing email unless you’ve agreed to it.

Who we share it with

We don’t sell personal data. We share it only with the providers who help us run the service, and only as much as they need:

• Payment provider (Dodo Payments): processes payments and may act as merchant of record, collecting tax.
• Hosting providers: run our website, API and database.
• GPU cloud provider: runs the image processing. Images pass through it in memory only.
• Email provider: delivers account emails.

We may also disclose data when the law requires it. Some of these providers are in other countries, including the United States. Where that applies, we rely on appropriate safeguards for the transfer.

How long we keep it

• Images: up to 10 minutes, in memory only.
• Account details, API keys and usage records: while your account is open. When you delete your account, your details and keys are deleted, and the usage and credit history no longer identify you.
• Purchase records: as long as tax and accounting law requires.
• Server logs: up to 30 days.

Data stored by the extension

The extension keeps its settings, your API key, your source images and a cache of your results in your browser on your own device. That data doesn’t reach us. Clear it at any time from the extension’s settings or by removing the extension.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict how we use it. You can correct your details or delete your account in its settings. For anything else, email img2imgshop@gmail.com. You can also complain to your local data protection authority.

Children

The service is for people aged 18 and over. We don’t knowingly collect data from children.

Changes

We’ll post any changes to this policy here with a new date, and tell you by email about significant ones.

Contact

img2img Browser Extension. Email: img2imgshop@gmail.com.