Privacy Policy

1. Files you upload

Files upload over TLS to encrypted object storage and are processed automatically to perform the tool operation you selected. No human views your files. All uploads and outputs are permanently deleted within 24 hours. Your files are never sent to the advertising or analytics providers in section 4, and the tools that run entirely in your browser — the invoice and receipt generators — never upload anything at all.

2. Information we collect ourselves

CompressKits has no accounts, so we hold no names, email addresses, or profiles. To run the service we keep standard, short-lived server logs (request paths, timestamps, IP addresses used for rate limiting and abuse prevention — the rate limiter itself stores only a salted hash of the address) and the technical records of each processing job (file size, tool used, success or failure).

We also measure usage first-party, on our own servers: which page was viewed, its language, the domain of the site you arrived from, and page-speed timings. Those measurements are tied to the anonymous session cookie in section 5, never to a name or an email address.

3. What we never do

• Sell your personal data, or share your files with anyone
• Use your files to train AI models
• Read, preview, or analyze file contents beyond automated processing
• Send your uploaded files, or anything inside them, to an advertising or analytics provider

4. Advertising and analytics providers

The site is free to use and is funded by advertising, so three third-party services run on these pages. Each receives your IP address, device and browser information, and the pages you visit on this site, and each decides for itself how it uses that data:

• Google AdSense (Auto Ads) selects and displays the ads. See how Google uses information from sites that use its services, and My Ad Center for your own Google ad settings.
• Google Analytics 4 counts visits and reports which pages and languages are used. Our Analytics tag sets Google’s advertising consent signals (ad storage, ad user data, ad personalization) to denied by default.
• Microsoft Clarity records how pages are used — including session replays of mouse movement, clicks and scrolling, plus heatmaps — so we can find broken and confusing interfaces. See the Microsoft privacy statement.

5. Cookies

Two cookies are ours: mf_sid, an httpOnly signed session cookie that keeps your anonymous session and quotas working, and mf_locale, which remembers the language you chose. Your light/dark theme choice is kept in your browser’s local storage, not in a cookie.

The providers in section 4 set their own: _ga and _ga_… for Google Analytics, _clck and _clsk for Microsoft Clarity, and advertising cookies including IDE on doubleclick.net and MUID on Microsoft domains. These are advertising and analytics cookies, not essential ones, and your browser settings can block or delete any of them. The cookie page lists them in full.

6. Your rights

Wherever you live, we extend GDPR-grade rights. Because we hold no account data about you, the personal data we process ourselves is limited to your uploaded files — which delete themselves within 24 hours — short-lived operational logs, and the anonymous usage measurements in section 2. Data held by the providers in section 4 is governed by their own policies, linked above. For any request or question: privacy@compresskits.com.

7. Changes

If we change this policy meaningfully, we will update this page and its effective date, with a plain-language summary of what changed and why.

September 9, 2026: this page previously said the site ran no third-party analytics or advertising and set no advertising cookies. That was inaccurate — AdSense, Google Analytics and Microsoft Clarity were already running. Sections 2 to 5 now describe what actually runs, and the cookie page was corrected in the same way.