Privacy Policy

The Short Version

FormFit does notupload, transmit, store, or access your images in any way. When you use our compression tool, your photo or signature is processed entirely within your web browser using client-side JavaScript (the Canvas API and OffscreenCanvas). No image data is ever sent to any server — ours or anyone else's.

We do not use cookies. We do not run third-party trackers. We do not collect personal information. There is no account system and no sign-up.

Data We Do Not Collect

To be unambiguous, FormFit does not collect:

• Your photographs, signatures, or any image files
• Your name, email address, or any personal identifiers
• Your device information, IP address, or browser fingerprint
• Cookies of any kind (session, persistent, or third-party)
• Usage patterns, click data, or behavioural analytics

How Image Processing Works

When you select an image in FormFit, the file is read into your browser's memory using the JavaScript File API. The image is then drawn onto an HTML Canvas element (or OffscreenCanvas where supported), resized to your target dimensions, and re-encoded as a JPEG at an optimised quality level — all within your browser's sandboxed environment.

The compressed output is generated as a Blob URL that exists only in your browser's memory. When you click "Download," the file is saved directly to your device. At no point does any image data leave your device or pass through any network request.

For a detailed explanation of our compression algorithm, see our Methodology page.

Analytics (Optional)

FormFit may optionally use Google Analytics 4 (GA4) to collect anonymised, aggregate page-view statistics — such as which exam preset pages are most visited — to help us prioritise content updates. If GA4 is enabled:

• It collects only anonymised page-view data (page URL, referrer, country-level geo)
• IP anonymisation is enabled by default
• No personally identifiable information (PII) is collected or sent to Google
• No advertising features, remarketing, or audience-building tools are active
• GA4 can be blocked by any standard ad-blocker or browser privacy extension without affecting FormFit's functionality

We may disable GA4 entirely in the future. FormFit functions fully without it.

Local Storage & Service Workers

FormFit does not use localStorage, sessionStorage, IndexedDB, or any other browser storage mechanism to persist your data. If a service worker is registered for offline support, it caches only static application assets (HTML, CSS, JavaScript) — never your images or personal data.

Third-Party Services

FormFit is hosted on Vercel. Vercel may process standard HTTP request metadata (IP address, user-agent) as part of serving the website. Vercel's privacy policy is available at vercel.com/legal/privacy-policy. No other third-party services are used.

GDPR & Data Protection

Because FormFit does not collect, process, or store any personal data, the tool is inherently compliant with the General Data Protection Regulation (GDPR), the Indian Digital Personal Data Protection Act (DPDPA), and other applicable data-protection frameworks.

There is no personal data to access, rectify, port, or delete — because none is collected in the first place. If you have any data-protection questions, please contact us.

Children's Privacy

FormFit does not knowingly collect any information from anyone, including children under the age of 13. Since the tool collects no data whatsoever, there is no risk of children's data being processed.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last Updated" date. Since we do not collect email addresses or user accounts, we cannot notify users directly of changes — we recommend bookmarking this page if you wish to stay informed.

Quick Links