Privacy Policy
Effective date: June 3, 2026 · Last updated: June 3, 2026
CleanImages ("CleanImages," "we," "us," or "our") is a product of ToolsNet.Work, a company based in Ontario, Canada. This Privacy Policy explains what personal information we do and do not collect when you visit cleanimages.online (the "Site") and use our in-browser image metadata tool (the "Service").
We built CleanImages around a simple idea: your photos are yours and should stay on your device. This policy is written to reflect that honestly — including the limited information the Site itself collects to run and to understand how it's used.
1. The most important thing: your images never reach us
When you use CleanImages to view or strip metadata from a photo, the image is processed entirely inside your browser, on your own device. Your files are never uploaded, transmitted, copied, or sent to CleanImages, ToolsNet.Work, or any third party.
As a result:
- We never receive, see, store, or have access to your images or the metadata inside them (including GPS coordinates, camera details, timestamps, AI-generation tags, C2PA credentials, or embedded thumbnails).
- There is no upload step. The Service works even with your internet connection disabled — you can verify this yourself by going offline and cleaning an image.
- Because we never hold your images, there is nothing for us to leak, sell, or hand over.
Everything below this section concerns the website and its usage data — not your image content, which is covered entirely by this section.
2. Information we collect
a) Server and access logs (always collected)
Our Site is hosted on Vercel. Like virtually any website, our hosting provider automatically records standard technical information when your browser requests a page, including your IP address, browser type and version, device and operating system information, referring page, the pages or files you request, and the date and time of the request.
We use this information to operate and secure the Site, deliver content reliably, diagnose technical problems, and prevent abuse. This data is collected regardless of your cookie choices because it is necessary to run the website safely.
b) Analytics (consent-aware)
We use Google Analytics and Vercel Analytics to understand how the Site is used in aggregate — for example, which pages are visited and how visitors move through the Site.
Google Analytics runs in a privacy-preserving consent mode: until you accept analytics through our consent banner, it sets no analytics cookies and collects only limited, aggregated, cookieless signals that do not identify you. Vercel Analytics is cookieless, and we load it only after you accept. When you accept, full analytics measurement (including analytics cookies) is enabled; if you decline, no analytics cookies are ever set. We never enable advertising storage.
These tools may collect information such as pages viewed, interactions, approximate location (derived from IP address), device and browser characteristics, and referral source. We use this information only in aggregate to improve the Site. You can change or withdraw your choice at any time (see Section 3).
c) Cookies and local storage
We use a small amount of browser storage:
- Strictly necessary / functional: to remember your language preference (English or Español) and to record your cookie/consent choice so we don't ask you repeatedly. These are required for the Site to function as you expect and are not used for tracking.
- Analytics: any cookies or identifiers set by Google Analytics or Vercel Analytics are placed only after you give consent and are removed or disabled if you withdraw it.
d) Information you send us
If you email us at help@toolsnet.work, we collect your email address and any information you choose to include in your message. We use this only to respond to you and to keep a record of the correspondence.
e) Account information (only if you choose to sign in)
Creating an account is completely optional — every part of the Service works anonymously, and an account is never required. If you choose to sign in, we use Firebase Authentication (provided by Google) to verify your identity. Depending on the sign-in method you pick (Google, or a passwordless email link), this means we process your email address and a unique account identifier. We use this only to sign you in and to associate saved preferences with your account; we never use it to access your images, which remain in your browser as described in Section 1.
3. What we do not do
- No required accounts. You can use CleanImages fully anonymously — an account is never required. Signing in is entirely optional (see Section 2e).
- No image storage. As explained in Section 1, we never receive your images in the first place.
- No sale of personal information. We do not sell your personal information, and we do not "share" it for cross-context behavioural advertising as those terms are defined under California law.
- No advertising networks. We do not serve third-party ads or use advertising trackers.
4. Legal bases for processing (EU/UK visitors)
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR / UK GDPR:
- Legitimate interests — for server and access logs, to operate and secure the Site.
- Consent — for analytics and any non-essential cookies. You may withdraw consent at any time without affecting prior processing.
- Consent / steps taken at your request — when you contact us, to respond to your message, and when you choose to create an optional account.
5. Service providers and disclosure
We share personal information only with service providers who process it on our behalf, under appropriate contractual safeguards:
- Vercel Inc. — website hosting and (with consent) analytics.
- Google LLC — Google Analytics (with consent) and, if you choose to sign in, Firebase Authentication.
We may also disclose information if required to do so by law, or to protect the rights, safety, or property of ToolsNet.Work, our users, or the public. Because we never receive your images, no image content can be included in any such disclosure.
6. International data transfers
Our service providers (including Vercel and Google) are located in or process data in the United States. Where personal information is transferred outside of Canada, the EEA, or the UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and equivalent mechanisms, consistent with applicable law.
7. Data retention
We keep server and access logs only for as long as needed for security and operational purposes, after which they are deleted or anonymized in the ordinary course. Analytics data is retained according to our settings within Google Analytics and Vercel Analytics. If you create an optional account, we retain your account information for as long as the account exists; you may ask us to delete it at any time. Messages you send us are kept for as long as needed to handle your request and maintain reasonable records.
8. Your rights
Depending on where you live, you may have some or all of the following rights regarding your personal information.
Canada (PIPEDA): You may request access to the personal information we hold about you and ask us to correct it, and you may withdraw consent to optional processing such as analytics. You may also file a complaint with the Office of the Privacy Commissioner of Canada.
EEA / UK (GDPR): You have the right to access, rectify, erase, restrict, or object to processing, to data portability, and to withdraw consent. You may also lodge a complaint with your local supervisory authority.
California (CCPA/CPRA): You have the right to know what personal information we collect, to request its deletion or correction, and to opt out of the sale or sharing of personal information. As noted above, we do not sell or share your personal information. We will not discriminate against you for exercising your rights.
To exercise any of these rights, email us at help@toolsnet.work. We may need to verify your identity before responding, and we will reply within the timeframes required by applicable law.
9. Children
CleanImages is not directed to children and is not intended for use by anyone under 13 years of age. We do not knowingly collect personal information from children under 13. If you are in a jurisdiction that sets a higher minimum age for consent to data processing (for example, between 13 and 16 in parts of the EU), you may use the Site only with the consent of a parent or guardian. If you believe a child has provided us personal information, contact us and we will delete it.
10. Security
We take reasonable technical and organizational measures to protect the limited personal information we collect. The strongest protection for your images, however, is structural: because they are processed only in your browser and never sent to us, they are not exposed to any risk of interception, server breach, or unauthorized access on our side.
11. Third-party links
The Site, including our blog, may link to third-party websites and resources. We are not responsible for the privacy practices of those sites, and this policy does not apply to them. We encourage you to review their privacy policies.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide a more prominent notice. Your continued use of the Site after an update means you accept the revised policy.
13. Contact us
If you have questions about this Privacy Policy or how we handle personal information, contact:
ToolsNet.Work Email: help@toolsnet.work Ontario, Canada