Privacy Policy

What “local processing” means

When you open ImgFlow, the page downloads the compression/conversion engine (a WebAssembly program) into your browser. Every image you drop in is then decoded, resized, and encoded by that engine on your device, with no image network request at any point. This is also why ImgFlow works as an offline app (PWA) — with no network, processing still runs.

Verify it yourself: open the Network panel in your browser DevTools, drop in an image, and process it — you will not see any image being uploaded. Or simply disconnect Wi-Fi and process again.

What we do not collect

• Your images: never uploaded, never stored, never backed up. No image of yours exists on any server.
• Account data (Free): Free users need no account, and we collect no account data from Free use. If you sign in without buying Pro, we store only the sign-in email and session. Pro subscription fields are listed next.
• Card numbers: we never handle card numbers. Payments are processed by Waffo as merchant of record.
• Shooting metadata: output images strip EXIF metadata and GPS location by default, so sharing leaks no shooting location (see the next section).

Pro account data

If you sign in or buy Pro, we store the fields below. We will not store any image-related data. Payments are processed by Waffo, our Merchant of Record.

• email: the address used to sign in and to attach a subscription.
• plan: yearly (annual subscription at $29 USD, renews automatically; yearly is the only plan sold).
• expires_at: when the current annual period ends. Turning off auto-renew does not end access immediately; Pro lasts until this date. Cancel via “Manage subscription” on your account page (Waffo customer portal) or by emailing taoliapp@gmail.com.
• Waffo customer / order id: Waffo identifiers used to grant or revoke Pro.
• session cookies: login session cookies that keep you signed in.

Google sign-in, when enabled, only takes your email. We do not request your Google avatar, contacts, or other profile data.

Card and payment data is handled by Waffo; we do not touch card numbers.

Magic-link sign-in emails will be sent by Resend (Resend, Inc.). The sender address is noreply@taoliapp.com.

To delete a Pro account, email taoliapp@gmail.com. We will delete the account record.

Free users

Free users need no account, and no account, image, or payment data is collected from Free use. Core features need no registration. Page-visit analytics is listed under Analytics below.

Data security and storage

This section covers the account data listed above. It applies only if you sign in or buy Pro.

• Where it is stored: in a Cloudflare D1 database (Cloudflare, Inc.) located in Cloudflare’s Asia-Pacific (APAC) region, with read replication turned off. The sign-in and checkout service runs on Cloudflare Pages Functions.
• Encryption in transit: every page and API request uses HTTPS (TLS). Requests to auth.imgflow.taoliapp.com pass through our reverse proxy and are forwarded to Cloudflare over HTTPS.
• Encryption at rest: according to Cloudflare’s D1 documentation, all D1 data is encrypted at rest with AES-256 (GCM), using keys managed by Cloudflare.
• Access control: the database has no public endpoint; it is reachable only by our sign-in service and through the operator’s Cloudflare account. Sign-in uses HttpOnly, Secure session cookies, and the account endpoint returns only the signed-in user’s own plan and expiry date. Service credentials are kept as encrypted Cloudflare secrets, and payment notifications are accepted only with a valid Waffo signature.
• Other stored records: if you sign in with Google, the sign-in tokens Google issues for the openid and email scopes are stored with your account record. Each payment notification is logged (event type and ID, order ID, buyer email and result) so that it is processed only once.
• Retention and deletion: sign-in sessions expire 7 days after they were last refreshed, and sign-in links expire after 5 minutes. Account records are kept while your account exists. To delete your account, email taoliapp@gmail.com; we delete the account record, its sessions and its payment-notification log entries within 30 days. Backup copies made during maintenance are deleted within 30 days.
• Images: never uploaded. They are processed only in your browser, as described at the top of this page.
• Payments: Waffo processes payments as merchant of record. We never receive or store card numbers or bank details; we only receive the order details Waffo sends us, such as order ID, buyer email, plan and status.

Where EXIF and GPS go

Phone photos usually embed EXIF: device model, aperture, timestamp, and GPS coordinates. ImgFlow’s output does not include this by default — the pipeline re-encodes pixels and metadata does not carry over. For you that is double protection: the image never left your device, and the output itself carries no location.

Data stored on your device

• PWA cache: the engine and page files are cached in your browser for offline use and speed; clear them anytime in browser settings.
• Downloaded results: processed files are saved only when you click download, to a location you choose. This site cannot and has never touched them.
• Preferences: theme (imgflow-theme) and language (imgflow-lang) live in your browser localStorage and never leave the device.

About advertising

The current version loads no advertising scripts. The ad slot in the page source is an empty placeholder and does not call an ad network. If skippable ads are added later, the ad system will never touch your images or processing activity — processing happens locally and is isolated from ad code. When a specific ad network is integrated, its scripts and privacy notes will be listed here.

Analytics

The only third-party analytics script actually loaded is Baidu Tongji (百度统计), at https://hm.baidu.com/hm.js?46ebc84b4ed2ff97e10de77ff16cf7b1. It records page visits. An entry event is also recorded (for example when you open images via the system “Open with”), with only the count of files — never file names or image content. It does not receive image files, file names, or anything you process in the tools. There is no Google Analytics, Plausible, Umami, or other analytics script.

Policy updates

If this policy changes materially, it will be updated here with a new date. Questions? Run the offline experiment, then re-read the first line: images are never uploaded.

Contact

Privacy questions: taoliapp@gmail.com.

Last updated: 2026-10