Privacy Policy
Your privacy is our top priority. Learn how we handle your images and data.
No Storage
Images are processed in memory and never saved to disk
Auto-Deletion
All data automatically deleted after processing completes
No Tracking
No personal data collection or third-party tracking
Ephemeral Processing
Images exist only during the optimization process
How We Handle Your Images
Squish is designed with privacy as a core principle. Here's exactly what happens when you use our service:
- Upload: Your image is sent directly to our server via an encrypted HTTPS connection.
- Processing: The image is loaded into memory and processed using libvips, a high-performance image processing library.
- Optimization: Compression, format conversion, and resizing happen entirely in memory.
- Delivery: The optimized image is sent back to your browser.
- Deletion: Immediately after delivery, all image data is purged from memory.
At no point is your image written to disk or stored in any persistent storage.
What Data We Collect
We collect minimal data necessary for service operation:
- Anonymous Analytics: Basic page view statistics via GoatCounter (privacy-focused analytics) to understand usage patterns. No personal information or IP addresses are stored.
- Technical Logs: Temporary server logs for debugging and performance monitoring. These contain no personally identifiable information and are automatically rotated.
We do NOT collect:
- Your images or any visual content you upload
- Cookies or browser fingerprints
- Personal information (name, email, etc.)
- IP addresses or location data
- User accounts or authentication data
Third-Party Services
We use the following third-party services:
- GoatCounter: Privacy-respecting analytics that doesn't track personal data. Learn more at GoatCounter's privacy policy.
- Render.com: Our hosting provider. Images are processed in memory on Render's infrastructure and are never persisted.
Data Security
We implement security best practices to protect your data during transmission and processing:
- All connections use HTTPS encryption (TLS 1.3)
- API rate limiting to prevent abuse
- Domain whitelist for URL-based uploads
- API key authentication for backend access
- Regular security updates and monitoring
Your Rights
Since we don't collect or store personal data or images, there's nothing to request, delete, or modify. You maintain complete control over your images:
- Images never leave your device until you explicitly upload them
- You can use the service anonymously without any account
- Downloaded images are yours alone - we retain no copies
Questions or Concerns?
If you have questions about this privacy policy or how we handle data, please open an issue on GitHub.
Last updated: October 20, 2025