Privacy
Your images are processed on your own device, in your browser. They are never uploaded to us or stored on any server. The one exception is AI mode in the Bulk Renamer, which sends images to the AI provider you choose, and only when you switch it on and add your own API key.
This page explains, in plain English, what happens to your files and what little information this site collects. Image Toolkit is run by Norwich Website Design, based in Norwich, UK.
Your images
Every tool runs in your web browser using built-in browser features (such as the canvas) and code we ship with the site. When you add a photo, it is read and processed on your device. The results are created on your device and saved straight to your downloads.
Some tools download extra code the first time you use them, for example the HEIC converter and the AVIF encoder. That is code coming to your device, not your images going out. Once you've visited, the site also works offline.
AI Renamer (optional)
The Bulk Renamer has an optional AI mode that suggests filenames and alt text. When you use it, each image is sent directly from your browser to the provider you pick, Anthropic (Claude) or OpenAI, using your own API key. The images and your key never pass through us.
- Your API key is stored in your browser on this device only, so you don't have to paste it in each time.
- The provider's own privacy terms apply to those images: Anthropic, OpenAI.
- Pattern-based renaming (the non-AI options) runs entirely on your device, like every other tool.
Visitor statistics
We use GoatCounter to count visits. It doesn't use cookies and doesn't track you across other websites. It records the page you visited, the site that linked to it, your browser type, screen size and country. Your IP address is used to work out the country and to avoid counting the same visit twice, and is not stored.
Error reports
We use Sentry so we find out when something breaks. If an error happens, your browser sends a report with the error message, the page, your browser and operating system, and technical details of what went wrong.
- When an error happens, the report can include a short replay of the page leading up to it. All text is masked and all images are blocked, so your files and anything you typed never appear. Ordinary visits without an error are never recorded.
- A small sample of page loads also sends timing information (how fast the page loaded).
- Sentry stores this data in its EU region (Germany).
Contact form
If you use the Contact form, your name, email address and message are sent to us through Formspree. We use them only to reply to you.
What's stored on your device
The site saves a few things in your browser's storage so it remembers your preferences: light or dark mode, favourite tools, tool settings, saved workflows, and your AI API key if you entered one. These stay on your device and are never sent to us. The site also keeps an offline copy of itself so it works without a connection. Error reporting may keep a temporary session identifier while the tab is open.
You can remove all of this at any time by clearing this site's data in your browser settings.
Cookies
This site doesn't set any cookies.
Hosting
The site is hosted on GitHub Pages. Like any web host, GitHub receives your IP address when it sends you the pages. See GitHub's privacy statement.
Your rights
Under UK data protection law you can ask what personal information we hold about you, and ask us to correct or delete it. In practice the only personal information we might have is a message you sent through the contact form. Get in touch using the Contact link above. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office.
Changes
If anything here changes, for example if we add advertising, we'll update this page and the date at the top.