Privacy Policy
Your Photos. Your Device. Period.
KB Image Resizer is built on a simple promise: your images never leave your browser. This page explains exactly how that works, what data we don't collect, and why it matters for sensitive documents like passport photos, Aadhaar cards, and signatures.
Zero Server Uploads — Guaranteed
Every image you process stays entirely on your device. We use the browser's HTML5 Canvas API to resize, compress, and convert images locally. No uploads. No cloud processing. No temporary storage. You can verify this yourself: load the page, disconnect from the internet, and the tool still works perfectly.
What We Don't Collect
Images & Photos
Your photos, signatures, ID scans, and documents never leave your browser. They are processed in-memory and discarded when you leave the page.
Personal Information
We don't ask for names, emails, phone numbers, or any identifiers. No accounts. No registration. No login.
Usage Analytics
No Google Analytics, no Mixpanel, no tracking pixels, no fingerprinting. We don't know how many people use the tool, which exams they pick, or what file sizes they target.
IP Addresses & Logs
We don't log IP addresses, user agents, referrers, or access times. Server logs (if any) are standard hosting infrastructure logs we don't access or analyze.
Cookies & LocalStorage
We don't set cookies. We don't use localStorage, sessionStorage, or IndexedDB for tracking. The only client-side state is your current session's UI preferences (like the last preset you picked), which resets on page reload.
Third-Party Data
No social media widgets, no chat widgets, no advertising scripts, no CDN trackers. The only external requests are Google Fonts (Geist) and the favicon — both loaded with preconnect and crossorigin for privacy.
How Local Processing Works
You open kbimageresizer.com. The HTML, CSS, and JavaScript download to your browser. No images are sent anywhere.
You select a file or paste from clipboard. The browser reads the file into a JavaScript File or Blob object. This data stays in your browser's memory.
The browser's built-in Image decoder reads the JPEG/PNG/WEBP into a bitmap in a canvas element. Still 100% local.
JavaScript draws the bitmap to a new canvas at your target dimensions, applying zoom, pan, rotation, brightness, contrast, saturation, DOP stamp, and border — all via the Canvas 2D API.
The canvas calls toDataURL("image/jpeg", quality) or toBlob(). The browser's internal JPEG encoder produces the compressed bytes.
Our script runs a 9-step binary search on the quality parameter (0.04–0.98) to hit your target KB range precisely. If the minimum quality is still too large, we pad JPEG comment segments (lossless) to meet the floor.
You click "Download JPG" or "Download PDF". The browser creates an object URL and triggers a download. The file goes to your Downloads folder. We never see it.
What Minimal Data Exists
The only data that touches our server is the static assets required to load the page:
- HTML/CSS/JS bundles — served from our origin or CDN (standard static hosting).
- Google Fonts (Geist) — loaded from fonts.googleapis.com/fonts.gstatic.com with
preconnectandcrossorigin="anonymous". Google may log font requests per their Privacy Policy. - Favicon — a small SVG/ICO file requested by the browser.
We do not use a CDN that injects analytics scripts. We do not use edge functions, middleware, or serverless functions that could process your data.
Why This Matters for Government Forms
Aadhaar & PAN Photos
Biometric identity documents. Uploading these to unknown servers creates identity theft risk.
Passport & Visa Photos
Official travel documents. Many countries consider passport scans sensitive personal data.
Signatures
Your legal signature on a server you don't control is a forgery risk.
Exam Application Photos
SSC, UPSC, IBPS, State PSC forms. These photos are linked to your permanent exam record.
Verify It Yourself: Offline Test
You don't have to trust us. Test it:
- Open kbimageresizer.com in your browser.
- Wait for the page to fully load (you'll see the tool interface).
- Disconnect your internet (turn off Wi-Fi / unplug Ethernet / enable Airplane Mode).
- Upload a photo, adjust settings, click Download.
- The file downloads successfully — proving zero server dependency.
Tip: Open DevTools → Network tab before disconnecting. You'll see zero requests after page load.
Children's Privacy
KB Image Resizer is not directed at children under 13. We do not knowingly collect any personal information from children. Since we collect no personal information from anyone, this is moot — but we state it explicitly for COPPA/GDPR-K compliance.
International Users (GDPR, CCPA, DPDP Act)
Because we process zero personal data, most data protection regulations have minimal applicability. However:
- GDPR (EU): No personal data = no controller/processor obligations. Font requests to Google Fonts are covered by Google's GDPR compliance.
- CCPA/CPRA (California): No sale of personal information (we have none). No "Do Not Sell" link needed.
- DPDP Act 2023 (India): No digital personal data processed. No consent required. No Data Protection Officer needed.
- LGPD (Brazil): Same principle — no personal data, no obligations.
Security
Since your data never leaves your device, there is no server-side data to breach. However, we follow security best practices for the static site:
- HTTPS everywhere (TLS 1.2+)
- Content Security Policy headers restricting script/style sources
- X-Frame-Options: DENY (prevents clickjacking)
- Referrer-Policy: strict-origin-when-cross-origin
- Permissions-Policy: restricts camera, microphone, geolocation (none used)
- No inline scripts — all JavaScript in separate files with integrity hashes where applicable
Changes to This Policy
If we ever change our data practices (e.g., add optional analytics with explicit consent), we will update this page and the "Last updated" date at the top. The core promise — your images never leave your browser — is a architectural constraint, not a policy choice. It cannot be changed without rewriting the entire application.
Contact
Questions about this privacy policy? Contact us:
/contact (on this site)