Summary: How PicMorph Protects Your Privacy
Unlike traditional conversion websites that require transmitting your photographs, proprietary logos, and sensitive documents to cloud data centers, PicMorph performs 100% of image decoding, compression, rasterization, and vector path tracing locally within your device's web browser. Zero bytes of your image files or pixel buffers are ever transmitted across the internet to our servers.
1. Image & File Processing Architecture
When you select or drag-and-drop an image into any of our 8 conversion tools (PNG to JPG, JPG to PNG, JPG to WebP, PNG to WebP, WebP to JPG, SVG to PNG, PNG to SVG Vector Tracer, or Smart Image Compressor):
- The file is read into memory using client-side JavaScript APIs (
FileReader,URL.createObjectURL, andBlob). - Pixel transformations and compression codecs are executed directly via the HTML5
<canvas>rendering context and hardware-accelerated Web APIs. - No image files, binary blobs, or metadata (EXIF/GPS data) are sent to any remote server or cloud bucket.
- Once you download your converted image or refresh the page, the allocated memory buffer is destroyed by your browser's garbage collector.
2. Information We Collect
PicMorph collects personal information strictly when you voluntarily provide it:
- Contact Form Data: If you submit an inquiry through our Contact Us page, we collect your Name, Email Address, Subject line, and Message content. This information is stored in our secure MySQL database table (
contact_messages) to enable our support team to respond to your inquiry. - Technical Metadata for Spam Prevention: When a contact form is submitted, we record your IP address and timestamp. This data is utilized exclusively for bot detection, rate limiting, and spam filtering.
3. Cookies and Local Storage
We do not use invasive third-party advertising cookies or cross-site tracking beacons.
- Essential Session Cookies: We utilize a standard PHP session cookie (
PHPSESSID) for authenticated administrators logging in to the PicMorph CMS panel. This cookie is HTTP-only, SameSite-protected, and expires when the browser session terminates. - Browser LocalStorage: In our single-page web app, browser local storage (
localStorage) is used to cache tool preferences (such as quality slider percentage or custom background color selections) locally on your device for convenience. This data never leaves your device.
4. Third-Party Services & CDNs
PicMorph links to standard static assets for user interface rendering:
- Google Fonts: Web fonts (Plus Jakarta Sans and JetBrains Mono) are loaded via Google Fonts to provide crisp typography. Google's privacy policy governs these font requests.
- Tailwind CSS Framework: Styling stylesheets are loaded locally or from certified content delivery networks.
5. Data Retention & Deletion Rights
We retain contact form inquiries only for as long as necessary to address your feedback, provide customer assistance, or maintain operational records. We never sell, rent, or trade your contact information with marketing brokers or external parties.
If you wish to request the deletion of any previous contact inquiries associated with your email address, please contact us at support@picmorph.local or submit a request via our Contact page.
6. Security Measures
Our application implements industry-standard security practices:
- Database queries on our server utilize secure PDO prepared statements, eliminating SQL injection vectors.
- Administrative authentication uses robust bcrypt cryptographic password hashing with session regeneration.
- All forms implement CSRF (Cross-Site Request Forgery) protection tokens.
7. Contact Information
If you have questions regarding this Privacy Policy or our client-side processing practices, please reach out through our Contact Us page.