Privacy Policy

Last updated: May 7, 2026

Short version: your images stay on your device. Sukat compresses, crops, paints, and converts entirely in your browser using the Canvas API. Nothing about your image content is sent to a server, stored remotely, or shared with anyone. We use Google Tag Manager / Analytics and Google AdSense for traffic measurement and ads — those are scoped to general usage data, not your image content. You can verify the no-upload claim by switching to airplane mode after the page loads; the tool keeps working.

What stays on your device

• Your images. Every file you drop, paste, or pick is processed by JavaScript running in your browser. The image bytes are read into a Canvas, re-encoded with the browser's built-in encoders, and downloaded back to your device. No upload happens at any point.
• Conversion report history. If you use the conversion-report feature, Sukat saves a small list of metadata (original filename, dimensions, file size, output filename and size, timestamp, and quality value) in your browser's localStorage. Nothing about the image bytes is stored — only the metadata. You can clear this list any time from the report modal's Delete All Data button. The data lives only on your device.
• Background-removal model cache. The first time you click Remove Background, your browser downloads a roughly 40 MB segmentation model and caches it locally. This model runs on your CPU/GPU; image data never leaves the device.

What we collect

The only network call related to your conversions is a small decorative counter ping to /api/count. It increments a global counter so the homepage can display "X images compressed today". The request body is empty — no image data, no filename, no IP-linked identifier — and the response is the new count. Failure of this endpoint (e.g., when offline) does not affect your conversion.

We also receive standard server logs through our hosting provider Cloudflare, which include request timestamps, IP address, browser user-agent, and the URL requested. These logs help with security and abuse prevention. Cloudflare's privacy practices are governed by their Privacy Policy.

Third-party services

• Google Tag Manager & Google Analytics — we use these to measure aggregate page traffic, popular features, and broad geographic distribution. They set cookies in your browser and report anonymised usage data to Google. See Google's Privacy Policy and opt-out add-on.
• Google AdSense — we display ads on some pages to fund continued development. AdSense uses cookies and similar technologies to serve ads based on prior visits, and may use the DoubleClick cookie. You can review and adjust ad personalisation at Google's Ads Settings.
• Cloudflare — hosting, edge delivery, and security. No image content is processed by Cloudflare; the site is served as static assets.
• JSZip, heic2any, @imgly/background-removal — these JavaScript libraries run inside your browser. They make no network calls of their own related to image content.

Cookies

Sukat itself sets no cookies. The cookies you see come from the third-party services listed above (primarily Google Tag Manager and AdSense). You can manage or block these cookies in your browser settings. Blocking analytics or advertising cookies will not affect Sukat's image-processing functionality, since none of it depends on cookies.

Children's privacy

Sukat is a free utility tool with no account system, no comments, and no profile. We don't knowingly collect personal information from anyone, including children. If you're a parent or guardian and have questions, please contact us.

International users

Sukat is operated from the Philippines. The site is delivered via Cloudflare's global edge network, so the static assets reach you from a server geographically near you. Your image data never crosses any network boundary at all because it's processed locally — meaning concerns about data residency under EU GDPR, India's DPDPA, the Philippines Data Privacy Act, or similar regulations do not apply to the image-processing step. Standard server-log data (IP, timestamp, request URL) is processed by Cloudflare under their privacy practices.

Changes to this policy

We may update this policy occasionally to reflect changes in third-party services, new features, or legal requirements. Material changes will be reflected by an updated Last updated date at the top of this page. We don't email or notify users individually since we don't collect email addresses.

Contact

Questions about this policy or how Sukat handles data? Reach out via the Contact page.