Privacy Policy

1. Who we are

This website is operated by:

Mat White, trading as INLine COMPUTERS
Blue Lias Cottage
Sandford
BS25 5AF
UK

Contact: [email protected]

This policy explains how we handle your information when you use imgtool.app, including the Music Visualizer and other browser-based tools.

2. Lawful bases for processing

We process personal data under the following UK GDPR Article 6 lawful bases:

• Analytics (Google Analytics 4): consent — Article 6(1)(a)
• Advertising (Google AdSense): consent — Article 6(1)(a)
• Payments and licence validation (Lemon Squeezy, our verification worker): contract necessity — Article 6(1)(b)
• Cloudflare server logs and security: legitimate interest — Article 6(1)(f) — for fraud prevention, DDoS protection, and service availability

3. Media files — your audio, images, and video

The Music Visualizer processes all media locally in your browser using the Web Audio API, Canvas API, and WebCodecs where available.

• Your audio, image, and video files are never uploaded to ImgTool.app servers.
• Processing happens entirely on your device — the visualizer, rendering, and video export all occur in your browser tab.
• This means ImgTool.app has no access to your unreleased music, private audio, or any media you use in the tool.
• Exported video files are saved directly to your device — they are not transmitted to us.

4. Analytics (Google Analytics 4)

We use Google Analytics 4 (GA4) to understand how people use the site — for example, which features are most used, how long people spend on the page, and where visitors come from. This helps us improve the product.

• GA4 is only loaded if you click "Accept analytics" on the consent banner. It does not load by default.
• If you decline, GA4 is never loaded and your visit is not tracked by Google Analytics.
• Your preference is stored in your browser's localStorage. Where available, you can reopen the consent prompt from the app's analytics settings link, and the site may ask again after roughly six months so your choice can be refreshed.
• When consent is given, analytics events can include broad product-usage signals such as page views, button clicks, tutorial steps, export starts, export completions, pricing/upgrade clicks, which feature categories are used, whether a built-in or uploaded background was chosen, and coarse duration ranges such as 3-4m, 4-10m, or 30-60m.
• Analytics events do not include your filenames, track names, exact audio/video length, media content, lyrics, artwork files, or exported video files.
• To understand repeat use, the app may send a simple local browser status such as new_this_browser or returning_this_browser after analytics consent. This is based on local browser storage and is not an account or login.
• GA4 data is anonymised (IP anonymisation is enabled) and processed by Google under their standard data processing terms.
• GA4 does not include your media files or any personal information you enter into tool inputs.

5. Cloudflare

ImgTool.app uses Cloudflare for content delivery, DNS, and security services. When you visit the site, your request passes through Cloudflare's network.

• Cloudflare may process standard server log data including your IP address, browser user agent, and request timestamps.
• This data is used for performance optimisation, DDoS protection, and abuse prevention.
• Cloudflare's privacy policy is available at cloudflare.com/privacypolicy.

6. Payments (Lemon Squeezy)

When you purchase a paid pass, including the 10-Day Release Pass, 30-Day Creator Pass, or Annual Pass, payment is handled by Lemon Squeezy (lemonsqueezy.com), who acts as the Merchant of Record for all transactions.

• Lemon Squeezy collects and processes payment information (card details, billing address, email address) to complete your transaction.
• ImgTool.app never stores or has access to your card details.
• Lemon Squeezy handles VAT/tax compliance on our behalf.
• Your email address is collected by Lemon Squeezy to deliver your licence key and order receipt.
• When you activate or revalidate a paid pass, ImgTool.app sends the licence key, a browser-generated device identifier, the product reference, and pass timing data to our verification worker so the pass can be confirmed for this device.
• ImgTool.app does not receive your full payment details. It only receives the limited pass-validation data needed to unlock the app on your device.
• Lemon Squeezy's privacy policy is available at lemonsqueezy.com/privacy.

7. Cookies and local storage

ImgTool.app uses browser localStorage (not traditional cookies) to store your preferences locally on your device.

• Analytics consent — whether you've accepted or declined GA4, plus a local timestamp so the site can refresh that choice after an appropriate interval (currently about 6 months on this browser).
• Preview quality preference — your preferred preview resolution setting.
• Saved presets — visualizer settings you've saved (stored entirely on your device).
• Recent exports and resume state — recent export cards and last-session restore data are stored locally so the homepage and visualizer can help you pick up where you left off.
• Channel / release kit — if you save release defaults, colours, or branding locally, they stay in your browser and are not uploaded to our servers.
• Browser device identifier — a random local identifier is stored so paid pass validation can be tied to this browser/device without requiring an account.
• Licence key and pass state — if you activate a paid pass, the key, expiry time, and limited pass-status metadata are stored locally so the app knows your pass is active. Validation requests are described in the payments section above.

Third-party services may set or request their own cookies or similar identifiers in accordance with their own policies. In practice, this can include Google Analytics after consent, Lemon Squeezy during checkout, Cloudflare for security/performance, and Google AdSense on pages where advertising is shown. ImgTool.app's own analytics events only begin after you accept the analytics banner on this browser.

8. Advertising

ImgTool.app may display contextual advertisements from Google AdSense on some pages. For UK and EEA visitors, advertising consent is managed via Google's Funding Choices Consent Management Platform, which loads at the top of each ad-supported page. Where consent is granted, personalised ads may be served. Where consent is denied, only non-personalised ads (NPA) are served. You can change your advertising consent at any time using the Funding Choices control on any ad-supported page, or via Google's ad settings at adssettings.google.com.

9. Data we do NOT collect

• We do not collect, store, or transmit your audio files, images, or video files.
• We do not require you to create an account or provide personal information to use the free tier.
• We do not sell your data to any third party.
• We do not use your data for purposes other than operating and improving this service.

10. Data retention

• Google Analytics 4: data is retained according to the current GA4 account setting (default 14 months unless changed).
• Licence validation logs (verification worker): retained for 12 months for fraud prevention and support.
• Lemon Squeezy purchase records: retained by Lemon Squeezy under their own policy (typically 7+ years for tax compliance).
• LocalStorage data on user devices: stored until cleared by the user or until the site removes it on a scheduled refresh (currently approximately 6 months for analytics consent).

11. International data transfers

Some of our service providers process data outside the United Kingdom, including in the United States. These providers include Google (Analytics and AdSense), Lemon Squeezy, and Cloudflare. We rely on the safeguards each provider has put in place for UK GDPR-compliant transfers, including the UK-US Data Bridge, the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, and adequacy decisions where applicable. Each provider's data transfer policy is available on their website.

12. Your rights (UK & EEA users)

Under UK GDPR and EU GDPR, you have the right to access, rectify, or request deletion of personal data we hold about you. Given the nature of the service, most free-tier users have no personal data stored with us. If you have purchased a pass or other paid product and wish to exercise a data right regarding your Lemon Squeezy transaction, please contact both us and Lemon Squeezy.

To exercise any data rights or raise a concern: [email protected].

You also have the right to lodge a complaint with the ICO (UK) or your local data protection authority.

13. Changes to this policy

We may update this policy as the service evolves. Material changes will be noted by updating the "Last updated" date at the top of this page. Continued use of ImgTool.app after changes constitutes acceptance of the updated policy.

14. Contact

Questions about this policy? Contact us at: [email protected].