Skip to content
KBSize

Privacy Policy

Last updated 2026-08-13.

The short version

KBSize is a free image compressor that works without an account. We do not ask who you are, and we have no interest in finding out.

Whatever you type into the image compressor is processed by your own browser. It is not transmitted to us, and we could not read it if we wanted to.

The site is paid for by advertising, and advertising involves cookies. That is the main thing this policy exists to explain, and you can opt out — see “Advertising” below.

Who is responsible

This site is operated by KBSize (“we”, “us”). For anything in this policy, including any request about your data, write to contact@kbsize.com.

Under the GDPR we are the “controller” of the limited personal data described here.

What we collect

We collect the following, and nothing else:

We do not ask for your name, email address or any account credentials, because the site has no accounts. We do not knowingly collect any special-category data.

What you type into the image compressor

The image compressor runs entirely in your browser using JavaScript. The values, text or files you give it are processed on your own device and are never uploaded to our servers. Closing the tab disposes of them.

This is a deliberate design choice, not just a policy promise: there is no upload endpoint to send them to. You can confirm it by opening your browser’s network inspector and watching that nothing leaves the page while you work.

Cookies

A cookie is a small file a site asks your browser to keep. We use them in these ways:

Your browser can block or delete cookies at any time through its own settings. Blocking the strictly necessary ones will make preferences stop sticking; blocking the rest has no effect on whether the site works.

Advertising

This site shows ads supplied by Google and, through Google, by other advertising vendors. We are paid per impression and click; that revenue is what makes the site free to use.

What you should know about how this works:

If you are in the European Economic Area, the United Kingdom or Switzerland, a consent banner appears before any advertising or analytics cookie is set, and your choice is passed to our advertising partners. You can reopen that banner and change your mind at any time using the “Cookie settings” link in the footer.

We also honour the Global Privacy Control (GPC) signal. If your browser sends one, we treat it as an instruction to opt out of the sale or sharing of your personal information as those terms are defined by US state privacy law.

Why we are allowed to process this (GDPR)

For visitors in the European Economic Area and the United Kingdom, our legal bases are:

Your rights

Wherever you live, you may write to us and ask what we hold about you, ask us to correct or delete it, or object to how we use it. We will answer.

If you are in the EEA or UK, the GDPR gives you the rights of access, rectification, erasure, restriction, portability, and objection, plus the right to withdraw consent at any time and to complain to your national data protection authority.

If you are a resident of California, Colorado, Connecticut, Virginia, Texas, Oregon or another US state with a comprehensive privacy law, you have rights to know, delete, correct and obtain a copy of your personal information, and to opt out of targeted advertising and of the “sale” or “sharing” of personal information. We do not sell personal information for money. Serving personalised advertising may nonetheless count as “sharing” under California law, which is why the opt-out and GPC handling above exist. We will not discriminate against you for exercising any of these rights.

To exercise any right, email contact@kbsize.com. Because we hold no account and cannot identify you from our logs, we may be unable to link any data to you — in which case we will tell you so plainly rather than ask you to prove who you are.

How long we keep things

Request logs are retained only as long as they are useful for security and debugging, on the order of days to a few weeks, and are then deleted or aggregated beyond recognition. Cookies expire on the schedule set by whoever placed them; advertising cookie lifetimes are set by the advertising vendor, not by us.

Where your data goes

The site is served from a global content delivery network, so a request is answered by whichever location is nearest to you. Our advertising partners are global companies. This means your data may be processed in countries other than your own, including the United States. Where EU or UK data is transferred, our providers rely on the European Commission’s standard contractual clauses or an equivalent approved mechanism.

Children

This site is a general-purpose utility. It is not directed to children, we do not knowingly collect personal information from anyone under 13 (or under 16 in the EEA/UK), and we have no way to identify a visitor’s age. If you believe a child has provided us with personal information, write to contact@kbsize.com and we will delete what we can find.

Security

The site is served over HTTPS. We keep the amount of data we hold small, which is the most effective security measure available to a site like this one: data that was never collected cannot leak. No system is perfectly secure, and we do not claim otherwise.

Changes to this policy

If this policy changes materially we will update the date below and, where the change affects how we use your data, say so on the site. Continued use after a change means the updated policy applies.

Contact

Questions, requests and complaints: contact@kbsize.com. We read this mailbox.