Privacy Policy

1. Scope and Purpose

This Privacy Policy describes how ImgShare ("we," "us," or "our") collects, processes, stores, and protects information when you use the image hosting service available at www.img-sharing.com (the "Service"). It applies to all visitors, whether they upload images anonymously or interact with the site in any other way.

ImgShare is an image hosting utility — not a social network. We designed our data practices around a principle of minimal collection: we gather only what is technically necessary to operate and improve the Service, prevent abuse, and comply with legal requirements.

2. Information We Collect

2.1 Content You Upload

When you upload an image, we store the image file on our servers to make it available via a shareable link. We also record the original filename, file size, MIME type, and upload timestamp. These metadata points help us manage storage, enforce file size limits, and generate the results page.

Important — EXIF stripping: Before storing your image, we automatically remove EXIF metadata. This includes GPS coordinates (latitude/longitude), camera make and model, lens information, date and time of capture, orientation data, and thumbnail previews embedded in the file. We do this because EXIF data frequently contains location information that could compromise your privacy if the image is shared publicly. The stripped data is discarded permanently — we do not retain it.

2.2 Automated Content Analysis

Every uploaded image is processed by a machine learning classifier that evaluates whether the content falls into categories flagged as Not Safe For Work (NSFW). This analysis produces a classification label (safe or NSFW) and a confidence score, both of which are stored alongside the image record. The purpose is solely to enforce our content policies, enable appropriate content warnings, and comply with advertising partner requirements. We do not perform facial recognition, biometric analysis, or identity inference of any kind.

2.3 Server-Side Technical Data

When you interact with the Service, our servers automatically record:

• IP address — partially anonymized for anonymous uploads (last octet zeroed)
• User-Agent string (browser name, version, and operating system)
• Referring URL (the page you visited before arriving at ImgShare)
• Pages requested and HTTP response codes
• Timestamp of each request

This technical data is used to monitor service health, identify and block abuse (such as automated spam uploads or denial-of-service attempts), and generate aggregate analytics (total page views, popular pages, error rates). We do not use this data to build individual user profiles or track browsing behavior across other websites.

2.4 Cookies and Local Storage

We use the following categories of cookies:

• Essential cookies — Maintain basic site functionality such as theme preference (light/dark mode) and NSFW content filter settings. These do not track you and cannot be opted out of without breaking core features.
• Analytics cookies — Help us understand aggregate usage patterns: which pages are most visited, average session duration, and geographic distribution of traffic. We use this data to prioritize feature development and infrastructure investment. Analytics data is aggregated and does not identify individual users.
• Advertising cookies — Set by our advertising partners (including Google AdSense) to deliver relevant advertisements and measure ad performance. These cookies may track your browsing across multiple websites. You can manage advertising cookie preferences through your browser settings or through Google's Ad Settings page at adssettings.google.com.

3. How We Use Your Information

We process collected information for the following specific purposes:

• •Service delivery — Storing uploaded images, generating short URLs, serving images via CDN, and displaying the image viewer page.
• •Content moderation — Running automated NSFW detection, processing abuse reports, responding to DMCA takedown requests, and removing prohibited content.
• •Abuse prevention — Rate limiting uploads, detecting spam patterns, blocking IP addresses associated with illegal activity, and cooperating with law enforcement when required.
• •Service improvement — Analyzing aggregate usage metrics to identify performance bottlenecks, prioritize features, and optimize the user experience.
• •Advertising — Displaying advertisements through Google AdSense and similar networks to sustain the free service model.
• •Legal compliance — Retaining data as required by applicable law and responding to valid legal requests from authorities.

4. Who We Share Data With

We do not sell your personal information. We share data only in the following limited circumstances:

• Infrastructure providers — Supabase (database and file storage), Vercel (hosting and CDN). These providers process data on our behalf under data processing agreements and do not use your data for their own purposes.
• Advertising networks — Google AdSense receives cookie-based signals to serve contextually relevant ads. Google operates under its own privacy policy (policies.google.com/privacy). You can opt out of personalized ads via Google's Ad Settings.
• Law enforcement — When required by a valid legal order (court order, subpoena, or warrant), or when we have a good-faith belief that disclosure is necessary to prevent imminent harm or illegal activity.
• Business transfers — If ImgShare is acquired, merged, or sells assets, user data may be transferred as part of that transaction. We will notify users of any such change via a notice on the website.

5. Data Retention Periods

We retain different categories of data for different durations, based on their purpose:

6. How We Protect Your Data

We implement technical and organizational measures to protect data against unauthorized access, alteration, or destruction:

• All data in transit is encrypted using TLS 1.2 or higher (HTTPS everywhere)
• Image files are stored in cloud infrastructure with redundancy across multiple availability zones
• Database access is restricted to application-level credentials with least-privilege permissions
• Administrative access requires multi-factor authentication
• Uploaded image URLs use randomly generated IDs with sufficient entropy to prevent enumeration
• We monitor for anomalous traffic patterns that may indicate attempted abuse or data scraping

No system is perfectly secure. While we take reasonable precautions, we cannot guarantee that unauthorized access will never occur. Do not upload images containing sensitive personal data (such as identity documents, financial information, or medical records) to any public image hosting service, including ours.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

• •Right to access — Request a copy of the personal data we hold about you.
• •Right to deletion — Request removal of your uploaded images and associated data.
• •Right to rectification — Request correction of inaccurate data.
• •Right to object — Object to certain types of data processing.
• •Right to data portability — Receive your data in a structured, machine-readable format.
• •Cookie management — Control cookies through your browser settings. Most browsers allow you to block or delete cookies, though this may affect site functionality.

To exercise any of these rights, email us at privacy@img-sharing.com with a description of your request. We will respond within 30 days.

8. International Data Transfers

ImgShare operates a global CDN, which means copies of uploaded images may be cached on edge servers in various countries to provide fast loading times. Our primary database and storage infrastructure is hosted in cloud regions that may be located outside your country of residence. By using the Service, you acknowledge that your data may be transferred to and processed in jurisdictions with different data protection laws than your own. We rely on our infrastructure providers' data processing agreements and standard contractual clauses to ensure appropriate safeguards for cross-border transfers.

9. Children's Privacy

ImgShare is not intended for use by individuals under 13 years of age (or the minimum age of digital consent in your jurisdiction, whichever is higher). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it promptly. If you believe a child has used our Service, please contact us at privacy@img-sharing.com.

10. Third-Party Services and Links

Our Service may contain links to third-party websites and integrates with external services. Each has its own privacy practices:

• Google AdSense — Advertising network. See Google Privacy Policy.
• Supabase — Backend infrastructure. See Supabase Privacy Policy.
• Vercel — Hosting and CDN. See Vercel Privacy Policy.

We are not responsible for the privacy practices of third-party services. We encourage you to review their policies independently.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will update the "Effective date" at the top of this page and, for significant changes, display a notice on the homepage. Your continued use of the Service after a change takes effect constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us: