Privacy Policy

Squish is designed with privacy as a core principle. Here's exactly what happens when you use our service:

1. Upload: Your image is sent directly to our server via an encrypted HTTPS connection.
2. Processing: The image is loaded into memory and processed using libvips, a high-performance image processing library.
3. Optimization: Compression, format conversion, and resizing happen entirely in memory.
4. Delivery: The optimized image is sent back to your browser.
5. Deletion: Immediately after delivery, all image data is purged from memory.

At no point is your image written to disk or stored in any persistent storage.

We collect minimal aggregated data necessary for service operation and improvement:

• Page View Analytics: Basic page view statistics via GoatCounter (privacy-focused analytics) to understand which pages are visited. No personal information, cookies, or IP addresses are stored.
• Usage Metrics (Aggregated): Hourly aggregated statistics about service usage:
  • Number of optimization requests per hour
  • Average file sizes (before/after optimization)
  • Format conversion statistics (e.g., PNG→WebP)
  • Processing times and success/error rates

  These metrics are aggregated by hour with no individual request tracking, IP addresses, or personally identifiable information. They help us monitor service health and optimize performance. Metrics data is automatically deleted after 30 days.

• Technical Logs: Temporary server logs for debugging and performance monitoring. These contain no personally identifiable information and are automatically rotated every 30 days.

We do NOT collect:

• Your images or any visual content you upload
• Individual request details or image metadata
• Cookies or browser fingerprints
• Personal information (name, email, etc.)
• IP addresses or precise location data
• User accounts or authentication data (service is completely anonymous)

We use the following third-party services:

• GoatCounter: Privacy-respecting analytics that doesn't track personal data. Learn more at GoatCounter's privacy policy.
• Hetzner Cloud: Our hosting provider (Germany-based). Images are processed in memory on our infrastructure and are never written to disk or persisted.

We implement security best practices to protect your data during transmission and processing:

• All connections use HTTPS encryption (TLS 1.3)
• API rate limiting to prevent abuse
• Domain whitelist for URL-based uploads
• API key authentication for backend access
• Regular security updates and monitoring

Since we don't collect or store personal data or images, there's nothing to request, delete, or modify. You maintain complete control over your images:

• Images never leave your device until you explicitly upload them
• You can use the service anonymously without any account
• Downloaded images are yours alone - we retain no copies