Privacy Policy

Draft copy · Legal reference document
This document is a reference draft of the Privacy Policy based on zipo.pics's actual technical architecture. It must be reviewed by a qualified attorney and the bracketed placeholders 【】 completed with the entity information before official publication. All provisions must remain consistent with the product's real behavior, and in particular must not deviate from the core commitment of "zero image upload."

Effective date: 【2026--, to be filled】
Last updated: 【2026--, to be filled】

1. Overview and Scope

zipo.pics (hereinafter "the service" or "we") is an image compression tool that runs entirely locally in your browser. This Privacy Policy explains how we process personal information relating to you and the rights you enjoy.

Operating entity (personal information processor): 【operating entity name, to be filled】
Registered address: 【registered address, to be filled】
Contact / privacy email: [email protected]
Data Protection Officer (DPO, if applicable): 【name and contact, to be filled】
Who it applies to: all users who visit the website, use the service, or register an account.

This Policy also follows the requirements of the Personal Information Protection Law of the People's Republic of China (PIPL) and, where applicable, the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).

2. What Information We Collect

2.1 Information You Provide Actively (Account Information)

When you sign in via a third-party account, we obtain from the sign-in provider and establish an account record, including:

The sign-in provider identifier (e.g., Google / Apple / WeChat / X) and the unique user identifier returned by that provider (sub / openid / account ID);
A display name (email for Google / Apple, nickname for WeChat, @username for X);
The encrypted OAuth token required to maintain the sign-in session.

2.2 Information We Collect Automatically (Metadata and Service Logs)

To provide billing and account reconciliation, we retain:

Credit ledger: your Credit increase/decrease records (using an append-only ledger to accurately compute the balance);
Order records: order number, plan, amount, currency, payment status, and payment transaction ID;
Essential technical logs: server-side logs for security and troubleshooting (excluding image content).

2.3 Local Storage and Cookies

This service stores only the following data locally in your browser (using localStorage / sessionStorage / IndexedDB, not traditional third-party cookies); except for the analytics data in Section 2.5 below, given your consent, we do not engage in cross-site tracking or sell/share your personal information with any third party:

Essential (always on): interface theme, language preference;
Local preferences (optional): your last compression settings (format, quality, etc.) to avoid repeated configuration next time;
Consent status: your consent choices for local storage;
Session token: a refresh token used to restore sign-in, stored encrypted in your browser's local storage; the short-lived access token (JWT) is held only in memory and expires when the page is closed.

2.4 Information We Do "Not" Collect (Core Commitment)

Your original images and compressed results are never uploaded to our servers, and we never store your image content. All compression is completed locally in your browser via WebAssembly.
Our servers reject at the routing layer all requests carrying image bytes (fields such as image / bytes / file) with HTTP 400. You can view the outbound request statistics for this session in real time in the page's "Privacy Guardian" — the count of image bytes sent outbound is always 0.

2.5 Analytics and Performance Data

To improve product performance and understand feature usage (and containing no image content whatsoever), we collect the following first-party analytics data only after you have given prior consent:

Behavior events: page views (pageview), button clicks, form submissions, and feature usage (e.g., compress start/success, format & quality selection, preset usage);
Source & channel: UTM parameters (utm_source / medium / campaign, etc.) and source identifiers (?from=?ref=?source=) carried in your visit links, recorded and persisted only on first visit;
Performance & errors: first-contentful-paint performance (LCP) and front-end errors;
Account linkage: once signed in, the above events are linked to your user ID for reconciliation and troubleshooting.

The above data is stored locally in your browser (localStorage / sessionStorage / IndexedDB) and reported to our first-party endpoint (/api/telemetry/batch); we do not share it with any third party and do not use it for advertising profiling. You can disable it at any time in the footer "Cookie Settings" (after disabling, no further collection occurs; data already reported is retained per Section 9).

3. How and Why We Process Information

We use the collected information only for the following purposes:

To provide, maintain, and improve the service (including local compression, account, and Credit management);
To process payments and reconcile Credits (verifying orders with the payment provider);
Security protection, fraud prevention, and abuse prevention;
To fulfill legal obligations (e.g., financial and tax retention requirements);
To send necessary service notifications, within the scope of your consent.

We will not use your personal information for automated decision-making or commercial marketing unrelated to the foregoing purposes, nor will we sell your personal information.

4. Information Sharing and Third Parties

We share information only with the following recipients to the extent necessary:

Recipient	Purpose of sharing	Data shared
Google / Apple / WeChat	Account sign-in and identity verification	Tokens required for the sign-in callback; no images are otherwise provided
X (Twitter)	Account sign-in and identity verification	Tokens required for the sign-in callback and public username (@username); no images are otherwise provided
Creem.io (Payment Institution / Merchant of Record)	Processing payments and refunds	Order number, plan, amount, currency, payment success callback URL
Cloud infrastructure providers (e.g., Cloudflare)	Website hosting, edge acceleration, and security	Necessary access and technical logs

Card information is processed directly by Creem; we never receive or store your card number.
Except for the foregoing purposes and legal requirements, we will not provide your personal information to any third party.

5. Cross-Border Transfers

The service relies on cloud infrastructure located in different countries/regions (including 【country/region of servers, to be filled】, Cloudflare, Creem, etc.). If your personal information is transferred outside your jurisdiction, we will adopt compliant transfer mechanisms in accordance with applicable law, including but not limited to:

Users in China: in accordance with Chapter 3 of PIPL, fulfill the obligations of notice, separate consent, and (where applicable) security assessment / standard contract / certification for the outbound transfer of personal information;
EU users: in accordance with Articles 44–49 of the GDPR, adopt adequacy decisions, Standard Contractual Clauses (SCCs), or other recognized safeguards.

For the specific recipient names, countries/regions, and transfer mechanisms, see 【Appendix: Cross-Border Transfer Details, to be filled】.

6. Data Security

We adopt reasonable technical and managerial measures to protect your personal information, including:

Transport-layer encryption (HTTPS / TLS);
Encryption of OAuth tokens at storage;
A hard-coded server-side "zero image upload" guard (rejecting all image byte fields);
Classified management of personal information and least-privilege access control.

Although we do our utmost to protect your information, internet transmission cannot be guaranteed absolutely secure; in the event of a security incident, we will notify you and the regulatory authority in accordance with laws and regulations.

7. Your Rights

Under PIPL and GDPR, you enjoy the following rights over your personal information, and exercising them incurs no unreasonable fee:

Access and copy: obtain a copy of your personal information held by us;
Rectification and supplementation: correct inaccurate or incomplete personal information;
Erasure (right to be forgotten): delete your personal information where required by law;
Restriction and objection: restrict or object to processing in specific circumstances;
Data portability: obtain and transfer your personal data in a structured, commonly used format;
Withdraw consent: you may withdraw consent previously given at any time; withdrawal does not affect processing already carried out before withdrawal;
Complaint: file a complaint with the relevant regulatory authority (e.g., China's cyberspace administration, or an EU member state's data protection authority).

How to exercise: submit a request via the contact methods in Section 12. We will respond and process within the legal time limit (usually no more than 【30】 days). Regarding account deletion: you may unlink your sign-in method in Account Settings at any time; account and Credit ledger records will be retained per Section 9. If you need to delete your account and deletable personal information, please send a deletion request; we will delete or anonymize it when technically feasible, except for aggregated/ledger data required for finance and fraud prevention, or the minimum retention required by law.

8. Minors

We value the protection of minors. Minors under the age of fourteen must obtain the consent of their parents or other guardians to use this service; we will formulate dedicated personal information processing rules for minors in accordance with Article 31 of PIPL.
If you are located in the EU, this service is not directed to children under 【16】 (specific age per member state law, to be filled) without guardian consent.
If we discover that we have inadvertently collected a minor's personal information without a lawful basis, we will delete it as soon as possible.

9. Data Retention Period

We retain personal information only for the shortest period necessary to achieve the processing purpose:

Account information: during the life of the account; handled per Section 7 after deletion;
Order and financial records: retained for the minimum period required by fiscal, tax, and other laws and regulations (usually 【5–10】 years, to be filled);
Credit ledger: the shortest period necessary to achieve accurate Credit and reconciliation; anonymized where feasible after account deletion;
Technical logs: usually 【__】 days, then deleted or anonymized upon expiry.

10. This Service's Privacy Commitment (N-04)

We turn the privacy commitment into verifiable facts through engineering:

Compression is 100% completed locally on your device; image bytes never leave the browser;
The server accepts only metadata and actively rejects any image fields;
The client displays in real time that "image bytes outbound = 0".

11. Policy Changes

We may update this Policy from time to time. For material changes, we will announce in advance on the website and notify you in a prominent manner; where required by law, we will obtain your renewed consent. The "Effective date" at the top of this page indicates the most recent update.

12. Contact Us

If you have any questions, comments, or rights requests regarding this Policy or your personal information, please contact:

Privacy email: [email protected]
Mailing address: 【operating entity registered address, to be filled】
Data Protection Officer (DPO, if applicable): 【contact, to be filled】

This Privacy Policy is a draft legal reference document and does not constitute formal legal advice. It must be reviewed by a qualified attorney before official publication. All 【】 markers in the text indicate entity / jurisdiction / period information to be completed.

Contact: [email protected] · Last updated 2026-09-08