Privacy Policy

Last updated: July 2026

The short version

ExactPic processes images entirely in your browser. We do not receive, store, or transmit your files.

Data controller

The data controller for ExactPic is MASTERPANEL LLC (Kentucky Limited Liability Company, Louisville, Kentucky, USA). Company record: Kentucky Secretary of State. Mailing address: 6844 Bardstown Rd #5052, Louisville, KY 40291, USA. Contact: [email protected].

What we don't collect

A note on output metadata: when a tool re-encodes an image (resize, compress, or HEIC-to-JPG), the new file is drawn on a canvas in your browser, which strips EXIF and GPS data and normalizes orientation. This happens on your device; we never see the input or output. You can also use our EXIF / GPS remover to inspect and strip metadata explicitly.

Hosting and content delivery

The site is served as static files from a virtual server hosted by Contabo, in front of the Cloudflare CDN. Like any website, these providers automatically log standard technical request data (IP address, user agent, timestamp, requested URL) to deliver pages and protect against abuse. These logs never contain the contents of your files. Provider log retention is governed by Contabo and Cloudflare; we do not build our own profiles from these logs.

Analytics and cookies

We use Google Analytics 4 (GA4) to measure aggregate traffic: pages visited, general device type, and tool usage events (tool_open, file_select, process_start, process_complete, process_fail, download, retry_tool, portal_view, task_view, check_result, heic_decoded, report_error_click).

GA4 does not receive your images, filenames, or the values you type into a tool.

Measurement is on by default. You can switch it off from the footer of any page or on this page, and a browser sending a Global Privacy Control signal is opted out automatically.

GA4 sets first-party cookies (_ga, _ga_*) unless you switch analytics off. IP anonymization is enabled in our GA4 configuration.

GA4 default event retention is 2 months unless changed in the GA4 property settings.

To opt out, use a browser extension that blocks Google Analytics, or enable “Do Not Track” and a GA opt-out add-on from Google.

Google Analytics 4 runs by default and can be switched off below, on any page from the footer, or automatically by a browser sending a Global Privacy Control signal. While it runs, GA4 may set identifiers and record aggregate events such as page views and tool interactions. IP addresses are anonymized. We do not use advertising cookies. Google retains GA4 data according to our configured retention period; see Google's privacy policy.

Analytics preference

Aggregate traffic measurement (GA4) is on so we can see which tools get used and which pages fail people. Photos never leave your device either way — that is about how the tools work, not about this setting. Disabling stops collection immediately, clears the analytics cookies and keeps the scripts out on later visits. The choice is remembered on this device, and nothing you have open is disturbed by making it.

Enabling or disabling analytics persists on this device. Disable updates consent to denied, clears ExactPic-set _ga cookies where possible, and reloads so analytics scripts are not injected again. You can also block trackers with your browser without affecting the tools.

Email and contact

If you email us we receive your message and address to reply, and keep it only as long as needed to handle your request. We do not add you to any marketing list.

Children

ExactPic is a general-purpose utility and is not directed at children. We do not knowingly collect personal information from anyone, including children.

Changes and incident contact

We may update this policy as the service changes; the "last updated" date above reflects the current version. To ask a privacy question or report a data-protection concern or security incident, email [email protected].