Security

Last updated: June 15, 2026

1. Client-Side Processing

The core principle behind imgi.io's security is local processing. All of our image tools — compress, resize, convert, crop, transparent corners, SVG to PNG, and favicon generator — run directly in your web browser. Your files are processed using your device's computing resources through standard Web APIs (Canvas, FileReader, Blob). No file content is ever uploaded to or stored on our servers.

2. Encryption

All connections to imgi.io are encrypted using HTTPS with TLS (Transport Layer Security). This ensures that data transmitted between your browser and our servers cannot be intercepted or modified by third parties. We enforce HTTPS for all pages and resources.

3. Infrastructure

imgi.io is hosted on Cloudflare, a global cloud platform that provides:

Cloudflare's security infrastructure is SOC 2 Type II, ISO 27001, and PCI DSS certified. For more details, see Cloudflare's Trust Hub.

4. No Data Storage

imgi.io does not store user data. We do not have databases for user accounts or file storage. Since image processing happens in your browser, there is no server-side data to protect or breach. The only exception is send.imgi.io, a separate service that temporarily stores content for cross-device transfer (content is automatically deleted after 48 hours).

5. Vulnerability Reporting

We take security vulnerabilities seriously. If you discover a security issue, please report it to us immediately. We will investigate and address valid reports promptly. Please do not publicly disclose vulnerabilities before we have had an opportunity to address them.

6. Best Practices for Users

While imgi.io processes files locally, we recommend the following practices: