On-device · nothing uploaded

Privacy you can verify, not just trust.

ImageForge was built privacy-first. Every image is processed entirely on your Mac — there is no cloud to send anything to. This page explains exactly what that means, in plain language, and sets out your rights under the GDPR.

Last updated: June 25, 2026
No cloud

Images are compressed locally. There is no server to upload to — the app works fully offline.

No account

No sign-up, no login, no email required to use the app.

No tracking

No analytics SDKs, no telemetry, no third-party trackers in the app.

You own outputs

Files stay on your disk, handled exactly the way you choose.

Who is responsible

The data controller for this website and the ImageForge app is Color Vivo Internet, S.L. ("Color Vivo"), a company incorporated in Spain. You can reach our privacy contact at hello@imageforge.info. Because the app is designed to keep your data on your own device, in practice we hold very little — but where the GDPR applies, Color Vivo is the entity accountable for it.

What we process

When you use the ImageForge app, we collect nothing about your images or your activity: no usage analytics, no crash telemetry sent automatically, no profiling. The only personal data we may process is what you actively give us — the email address you submit to the waitlist or newsletter, and the contents of any message you send to support. If you email us, we receive your address and whatever you choose to write.

Legal basis (GDPR)

Under Article 6 of the GDPR, we rely on your consent for the waitlist and newsletter (you opt in, and can withdraw at any time), and on our legitimate interest in responding when you contact support. The purchase of Pro is processed by Apple under its own contract with you; we are not a party to your payment data.

How images are processed

All compression and conversion happens on-device using a local engine. Your images, their contents and their metadata never leave your Mac. Because nothing is uploaded, ImageForge keeps working with no network connection at all.

Metadata & EXIF

By default ImageForge strips EXIF and GPS data from outputs to protect your privacy and reduce file size, while preserving the color profile, orientation and copyright. You control exactly what is kept in Preferences → Metadata — and these choices are applied locally.

Data retention

We keep your waitlist or newsletter email only for as long as the list is active or until you unsubscribe, whichever comes first. Support emails are kept for as long as needed to resolve your request and a reasonable period afterwards. We do not build long-term profiles, and there is no app-side data to retain because nothing is collected from the app.

Third parties & processors

We keep the stack deliberately small. Cloudflare provides hosting (Cloudflare Pages) and email routing for the waitlist and our inboxes, acting as our processor. Apple handles Pro purchases through the App Store and StoreKit under its own privacy policy. We use no advertising networks and no third-party trackers.

International transfers

Our providers may process data outside the European Economic Area. Where that happens, transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses. Because the app itself transmits nothing, these considerations only touch the email and hosting layer of the website.

Payments

If you purchase Pro, the transaction is handled by Apple's payment processor (the App Store / StoreKit). We never see or store your card details. Your license status is validated locally; Restore Purchase re-activates Pro without any account.

Your rights

Under the GDPR you have rights over any personal data we hold. Because the app holds none, these mainly concern the email you may have given us. To exercise any of them, write to hello@imageforge.info and we will respond within the legal time limit.

Access

Ask what personal data we hold about you and get a copy.

Rectification

Have inaccurate or incomplete data corrected.

Erasure

Ask us to delete your data — e.g. remove your email from the list.

Objection

Object to processing based on legitimate interest.

Portability

Receive the data you gave us in a portable format.

Withdraw consent

Unsubscribe or withdraw consent at any time, with no effect on past lawful processing.

If you believe we have mishandled your data, you also have the right to lodge a complaint with your local supervisory authority (in Spain, the Agencia Española de Protección de Datos).

Cookies & local storage

This site keeps storage to a minimum. We use Google Analytics for aggregate visitor stats, configured with cookieless Consent Mode — it runs without cookies by default and only sets analytics cookies if you choose Accept. We never use advertising cookies or cross-site ad tracking.

Theme preference (essential)

We store your light/dark choice in your browser's localStorage (key if-theme) so the site remembers it. It is strictly functional, never leaves your browser, and is not used to identify you.

Cookie choice (essential)

When you accept or reject in the cookie banner, we remember that decision in localStorage (key if-cookie-consent) so we don't ask again. That's the only purpose it serves.

Waitlist email (Cloudflare)

If you submit your email to the waitlist or newsletter, it is handled through Cloudflare Email Routing. We store only the address you give us, to email you about the launch.

Analytics — Google Analytics 4

We use Google Analytics (GA4) for aggregate, anonymous visitor statistics. It loads with Consent Mode denied by default, so it runs cookieless (no analytics cookies) until you choose Accept in the banner. On Accept it may set GA's standard analytics cookies; on Reject it stays cookieless. Google acts as a data processor; we never use it for advertising.

Questions about privacy?

We're glad to answer anything. Email hello@imageforge.info and a human at Color Vivo will reply.

This page describes how ImageForge and Color Vivo Internet, S.L. handle data. We update it when our practices change; the date above always reflects the current version.