Privacy Policy
Last updated: April 25, 2026
This Privacy Policy describes how Compress Image (the "Service", available at caitty.com/compress-image) handles information when you use the in-browser image compression studio and the optional Pro license. We have built the product around a simple idea: your images belong to you, and we do not need to see them in order to be useful.
1. Image Files Never Leave Your Device
All image compression happens locally inside your web browser using the HTML5 Canvas API. The original files you drop into the studio, and the compressed results, are processed in your browser's memory and stay on your device. They are never uploaded to our servers, never transmitted to any third party, and never stored by us — not even temporarily.
This includes the file names, file sizes, image dimensions, and the pixel content of every image you process. None of it leaves your machine.
2. Local Storage on Your Device
The Service uses your browser's localStorage to remember a
few small pieces of information that make the product work correctly.
This data lives on your device, in your browser, and is never sent to
our servers unless you explicitly take an action that requires it
(such as activating a Pro license).
- A daily counter so the free tier knows how many compressions you have used.
- The date of your first visit so the free tier can grant you the day-one allowance.
- Your selected language preference.
- If you purchase Pro: your license key, the email tied to your purchase, and a flag indicating Pro is active.
You can clear all of this at any time by clearing your browser's site data for caitty.com.
3. Pro Purchases (Stripe)
If you choose to upgrade to Pro, the checkout flow is handled by Stripe, a PCI-compliant payment processor. We do not see, store, or have access to your card details. Stripe handles all payment information directly and is governed by its own privacy policy.
After a successful payment, our backend receives a confirmation event from Stripe containing the email you used at checkout. We use that email to:
- Generate a license key tied to your purchase.
- Send the receipt and license key (Stripe also sends its own receipt email).
- Allow you to activate Pro on additional devices via email + license key.
We retain the email and the license key for as long as the license is valid (the lifetime license is intended to be permanent). We do not use this email for marketing.
4. License Activation
When you activate Pro on a new device by entering your email and license key in the activation dialog, our backend receives those two values, verifies them against our license records, and returns a yes or no answer. We log the activation event for fraud prevention and to help support requests, but we do not log image data — there is none to log.
5. Cookies
The Service does not set tracking cookies. The third-party scripts the page loads (Stripe.js for the checkout flow, JSZip from a public CDN for ZIP packaging) may set technical cookies required for their own operation. We do not use those cookies for analytics or advertising attribution.
6. Third-Party Services
The Service relies on a small number of third parties to deliver payments and static assets:
- Stripe — payment processing for Pro purchases.
- Cloudflare CDN / cdnjs — delivery of the JSZip JavaScript library used to package downloads.
These services may receive your IP address and standard request metadata (user agent, referrer) when your browser fetches their resources. They are subject to their own privacy policies.
7. Children
The Service is not directed to children under 13 and we do not knowingly collect any personal information from children.
8. Changes to This Policy
We may update this Privacy Policy as the product evolves. The "Last updated" date at the top of the page reflects the most recent revision. Material changes that affect what data is collected will be announced inside the product before they take effect.
9. Contact
Questions, concerns, or requests about this policy can be sent to support@caitty.com. We respond to a real human address — not a ticket queue.