Privacy Policy
Imgediit is designed around a fundamental security principle: what never leaves your device can never be leaked.Because our suite of document and image utilities executes 100% locally inside your web browser sandbox, we have zero visibility into your files.
Data Mapping and Local Isolation
The table below provides a detailed inventory of asset handling, showing the complete isolation between the user's workstation and our static delivery servers:
| Asset type | Processing Location | Storage Duration | Network Transit |
|---|---|---|---|
| Images (PNG, JPG, WebP) | Local Web Canvas / GPU Buffer | Temporary RAM (Released on tab close) | None (0 Bytes Transferred) |
| PDF Documents | Local WebAssembly (PDF-Lib runtime) | Temporary RAM (Released on tab close) | None (0 Bytes Transferred) |
| Signatures & Drawings | HTML5 Canvas Vector buffers | Transient memory only | None (0 Bytes Transferred) |
| User Preferences (Theme) | Browser LocalStorage | Persistent on device until cleared | None (Local client state) |
Compliance Auditing (GDPR, HIPAA, and SOC 2 Readiness)
For corporate clients, data privacy regulations place heavy compliance burdens when third-party servers process PII (Personally Identifiable Information). Imgediit simplifies this framework completely:
- GDPR Compliant by Architecture: Because no file transit takes place, Imgediit is not a "Data Processor" or "Data Controller" under the General Data Protection Regulation. There are no sub-processors to audit, and no risk of cross-border data leakage.
- HIPAA Medical Record Isolation: Healthcare companies can compress medical document scans, crop ID photos, and merge PDFs without signing a Business Associate Agreement (BAA) because patient files never enter a external network.
- Zero Server Retention logs: We do not log filenames, image contents, or document text. The static hosting provider only logs standard server assets request telemetry (like IP addresses requesting javascript source bundles) for CDN operations.
Security Sandbox Boundaries
Imgediit executes scripts inside your browser's default sandbox structure. This prevents scripts from accessing your machine's system files or network assets without explicit user drag-and-drop triggers. You can physically disconnect your internet connection (offline mode) and continue to crop, compress, scale, or sign files, which verifies that the logic stays on your device.