Privacy Policy

Instaimgr takes your privacy seriously. This Privacy Policy ("Policy") describes how we handle, store, and process information when you use our website, image transformations, and API services.

1. Information We Collect

We collect minimal information to provide a high-performance image processing service:

• Images: Any image file you upload is stored temporarily in our originals/ directory. Images are deleted periodically as storage limits require.
• Session Information: We use standard PHP cookies to remember your session ID, which enables you to see a gallery grid of "Recent Uploads" on the landing page.
• API Requests: We log server requests (including IP addresses, request endpoints, timestamps, and transform query strings) for rate-limiting, security check audits, and performance monitoring.

2. How We Use Information

Information collected is solely used to operate, secure, and optimize the Services, specifically:

• Applying dynamic transformations (crop, resize, filters, watermark) using Imagick.
• Serving cached transformation outputs inside the cache/ folder to reduce CPU loading and expedite delivery.
• Blocking malicious requests or excessive rate-limiting behaviors.

3. Cookies and Browser Caching

We use session cookies to match uploads to your local browser. Output transformation URLs are cached aggressively in the browser using Cache-Control headers to improve load speeds. No advertising trackers or marketing cookies are used.

4. Data Retention & Deletion

Original uploaded images and cached image conversions do not persist indefinitely. We store files to support active URL routing. You should not use Instaimgr as a permanent backup service. You may request the deletion of an uploaded image at any time by contacting us.

5. Security Measures

We implement robust server controls to protect your data, including:

• SSRF protection to prevent remote cURL requests from connecting to private loopbacks or subnet ranges.
• PDO SQL parameterization to prevent database exploits.
• Strict file upload whitelisting (verifying image headers/extensions) to defend against Remote Code Execution (RCE).

6. Third Party Services

We do not sell, trade, or distribute your uploaded files or access logs to third parties. We integrate only with standard security infrastructure and analytics tags (like Google Analytics) to monitor website traffic.

Back to App