Privacy Policy

The short version

If you read nothing else, these are the points that matter.

• Your images are never uploaded. Merging happens entirely in your browser.
• We have no accounts, so we never ask for your name, email, or password.
• We use Google Analytics to count visits and see which pages are useful.
• Anything the tool saves between visits is stored on your own device and deleted after seven days.

Your images never reach us

The merge tool loads your pictures into your browser and draws them onto a canvas there. No copy is sent to our servers or to any third party, at any point, including when you download the result.

This is a property of how the tool is built, not a policy promise we could quietly change. If we ever added a feature that needed to send an image somewhere, it would be an obvious, opt-in change and this policy would be updated first.

What we store on your device

So you do not lose work when a page reloads, the tool keeps your current session in your browser's own storage. None of it is transmitted to us.

You can delete all of it at any time using the clear option in the tool, or by clearing site data in your browser settings.

• Your layout settings, such as gap, borders, and output format, in local storage.
• The images in your current session, in your browser's IndexedDB database.
• Your light or dark theme preference.
• Session images are capped at 100 MB and are discarded automatically after seven days.

Information we collect

We do not collect personal information directly, because there is nothing on the site that asks for it. There are no accounts, no signup forms, and no newsletter.

We do collect anonymous usage statistics through Google Analytics, described below. If you email us, we obviously receive whatever you choose to put in that email, and we use it only to reply to you.

Analytics

We use Google Analytics 4 to understand how many people use the site and which pages they find. This tells us things like how many visits a page received and roughly which country they came from. It does not tell us who you are.

Google Analytics sets cookies and processes data on our behalf. You can opt out across all sites using Google's browser add-on at https://tools.google.com/dlpage/gaoptout, or by blocking analytics cookies in your browser.

Advertising

The site does not currently display advertising. We may introduce advertising through Google AdSense in future to cover hosting and running costs.

If and when that happens, Google and its partners may use cookies to serve ads based on your prior visits to this or other sites. You will be able to opt out of personalised advertising at https://www.google.com/settings/ads, and this policy will be updated before any ads appear.

Cookies and similar technologies

We do not use cookies for tracking you across the web ourselves. The cookies present on the site come from Google Analytics, and in future may come from advertising.

The local storage and IndexedDB data described above are not cookies and are never sent to a server. They exist purely so the tool can remember your work and your preferences.

Service providers

We rely on a small number of third parties to run the site. Each has its own privacy policy.

• Cloudflare, which hosts and serves the site and processes request logs for security and reliability.
• Google Analytics, for the anonymous usage statistics described above.
• Google AdSense, if and when advertising is introduced.

Legal bases for processing

If you are in the European Economic Area or the United Kingdom, our legal basis for processing the limited data described here is our legitimate interest in understanding how the site is used and in keeping it running securely. Where consent is required for analytics or advertising cookies, we rely on your consent and you may withdraw it at any time by blocking those cookies.

Your rights

Depending on where you live, you may have the right to access, correct, or delete personal data we hold about you, or to object to its processing.

In practice we hold almost nothing: no account, no profile, and no copy of your images. Data stored by the tool lives on your device, so you can delete it yourself by clearing site data in your browser. For anything else, email contact@mergeimagesonline.com.

Data retention and security

Analytics data is retained according to Google Analytics' own retention settings. Data the tool stores on your device is deleted automatically after seven days, or immediately when you clear it.

The site is served over HTTPS. Because your images stay on your device, the most significant privacy risk in a tool like this simply does not apply here.

Children's privacy

This site is not directed at children under 13, and we do not knowingly collect personal information from them. Since we do not collect personal information from anyone, there is very little scope for this to arise.

International transfers

Our service providers, including Google and Cloudflare, may process data on servers outside your country. They provide their own safeguards for those transfers under their respective privacy frameworks.

Changes to this policy

We may update this policy as the site changes. The date at the top shows when it was last revised, and material changes will be reflected there before they take effect.

Contact us

Questions about privacy can go to contact@mergeimagesonline.com.