Privacy policy

Who is responsible

Kobra IMG is run by Piero Nanni, an individual rather than a company, who is the data controller for the limited processing described below. Questions, requests and complaints all go to the same place: [email protected]. A postal address for formal correspondence is provided on request.

There is no data protection officer, because the scale and nature of the processing here does not require one: no accounts, no profiling, and no special categories of data.

Your images

Every tool on this site processes images locally in your browser using the Canvas API. Files you select are read into memory on your own device, transformed there, and written back out as a download. They are not transmitted to Kobra IMG or to any third party, they are not stored, and they are not retained after you close or reload the tab.

This is a property of how the site is built, not a promise about how we behave: the site is a static export with no upload endpoint. You can confirm it in your browser's Network tab while processing a file, and the tools continue to work with your connection switched off after the page has loaded.

Analytics

Page views are counted using a self-hosted instance of Plausible Analytics running on infrastructure controlled by the site owner. Plausible does not use cookies, does not store an identifier on your device, and does not follow you across websites.

What is recorded for each page view:

• the page URL on this site;
• the referring site, when your browser sends one;
• browser, operating system and device type, in coarse categories;
• country, derived from the IP address.

The IP address is used only to derive that country value and to generate a daily hash for counting unique visits; it is not stored in the analytics database. No profile of you is built, and nothing about the images you process — names, sizes, formats, contents — is sent to analytics.

Cookies and local storage

Kobra IMG sets no cookies at all — none for advertising, none for analytics, none for sessions. The only thing written to your device is your own answer to the cookie banner, stored in localStorage under kobra.consent so that you are not asked on every page. It records which categories you allowed and the date you chose, is readable only by this site, and is never sent anywhere.

The banner lets you decide, per category, what would be allowed to run: strictly necessary storage, preferences, analytics and marketing. No marketing or cross-site tracking is used, and none will load unless you allow that category. Rejecting everything optional does not reduce what the tools can do.

The full detail — what each category covers, how long your answer is kept, and how to change or withdraw it — is in the cookie policy.

Accounts and personal data

There is no sign-up, no login and no newsletter. The only way this site receives personal data is if you email the address on the contact page. In that case your message and address are kept only as long as needed to reply, and are never sold or shared.

Third parties and where data goes

The site is served as static files by Cloudflare Pages, which keeps standard server access logs — IP address, timestamp, requested URL, user agent — for security and abuse prevention. That is a normal part of serving any website and happens before any code of ours runs. Those logs are held by the provider under its own retention schedule and are not combined with anything else.

Like most hosting and analytics infrastructure, the provider and the analytics server may operate or replicate across countries outside the EEA and the UK. Where that happens, the transfer rests on the provider's standard contractual clauses or an equivalent safeguard.

Beyond the hosting provider and the self-hosted analytics described above, no third-party scripts, advertising networks, trackers, fonts or embeds are loaded on any page.

Legal bases

Under the GDPR the processing on this site rests on:

• Legitimate interest (Art. 6(1)(f)) — keeping server access logs to protect the site from abuse, and counting page views anonymously to know which tools are worth maintaining. Neither builds a profile of you, and neither is used for advertising.
• Consent (Art. 6(1)(a)) — anything in the optional cookie categories, which runs only if you allow it and which you can withdraw at any time from the cookie settings link in the footer.
• Legitimate interest (Art. 6(1)(f)) — replying to an email you chose to send.

Your images are not on this list, because they are never processed by us at all: they stay on your device.

Children

The tools are general-purpose and are not directed at children. No age is asked for and none is stored, because there is no account to create and nothing that would identify a visitor of any age.

Your rights

The GDPR gives you the rights of access, rectification, erasure, restriction, portability and objection. In practice there is usually very little here to exercise them against: Kobra IMG holds no account, no profile and none of your images, and the analytics data cannot be traced back to you, so it cannot be retrieved or deleted on request either.

Two things do exist. Any email you send is personal data held by Piero Nanni — write to [email protected] and the correspondence will be deleted. Server access logs containing your IP address are held by the hosting provider; ask at the same address and the request will be passed on, though these logs are short-lived and are not indexed by visitor.

You also have the right to lodge a complaint with your national data protection authority, and you can object at any time to the processing based on legitimate interest described above.

Changes to this policy

If the way the site works changes — a new tool that needs a server, for example — this page is updated before the change ships, and the review date below is bumped.