Privacy Policy

Account Information: When you create an account, we collect your username, email address, and password (stored securely hashed using bcrypt). Account creation is optional.

Upload Data: When you upload images, we store the image files along with metadata such as file name, size, type, upload timestamp, and NSFW tag status. We assign a unique identifier to each upload. EXIF metadata is stripped from uploaded images to protect your privacy.

Usage Data: We automatically collect certain information when you use the Service, including your IP address, browser type, operating system, referring URLs, pages visited, and timestamps. This data is essential for operating, securing, and improving the Service.

Cookies: We use essential cookies for authentication and session management. We use Cloudflare Turnstile for bot protection, which may set its own cookies.

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Process your image uploads and manage your account.
• Respond to support requests and communicate with you.
• Detect and prevent abuse, fraud, and violations of our Terms of Service.
• Enforce our content policies, including automated NSFW detection and prohibited content scanning.
• Generate anonymous, aggregated analytics to improve the Service.
• Comply with legal obligations and respond to lawful requests from law enforcement.

Images are stored on Cloudflare R2 cloud storage with encryption at rest. Account data is stored in a PostgreSQL database with encrypted connections. Passwords are hashed using bcrypt and are never stored in plaintext.

We implement industry-standard security measures to protect your data, including encrypted connections (TLS/SSL), secure authentication tokens, rate limiting, and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

We do not sell, trade, or rent your personal information to third parties. We may share data in the following circumstances:

• Service Providers: We use Cloudflare for CDN, storage, and bot protection. These providers process data on our behalf under data processing agreements.
• Law Enforcement - Legal Process: We comply fully with valid subpoenas, court orders, search warrants, preservation requests, and other lawful requests from law enforcement and regulatory authorities in any jurisdiction. Data disclosed may include account information, IP addresses, upload history, timestamps, session data, and content metadata.
• Law Enforcement - Proactive Reporting: When we detect or receive reports of illegal content (including CSAM, terrorism material, or exploitation content), we proactively report to the appropriate authorities (NCMEC, FBI, Interpol, Europol, local agencies) and preserve and provide all associated user data, IP addresses, and metadata without requiring a separate legal request.
• Law Enforcement - Emergency Disclosure: In situations involving imminent danger to life, serious physical injury, or ongoing exploitation, we may disclose user information to law enforcement without a court order, as permitted by applicable law.
• Safety: We may share information to protect the rights, safety, or property of ImgLink, our users, or the public.

By using the Service, you acknowledge that your data may be disclosed to law enforcement as described above. We maintain detailed logs to ensure cooperation with legal investigations is thorough and accurate.

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or ongoing investigation.

Uploaded images by guest users (without accounts) are retained indefinitely unless removed for policy violations or upon valid request.

Server logs containing IP addresses are retained for up to 90 days for security and abuse prevention purposes.

Exception - Illegal Activity: Where an account is terminated for illegal content or activity, all associated data (account details, IP addresses, upload records, session logs, and content metadata) is preserved indefinitely and made available to law enforcement. This data is not subject to deletion requests.

If you are a resident of the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate personal data.
• Right to Erasure: You can request deletion of your personal data ("right to be forgotten"), except where retention is required by law or for ongoing investigations.
• Right to Restrict Processing: You can request that we limit how we use your data.
• Right to Data Portability: You can request your data in a structured, machine-readable format.
• Right to Object: You can object to the processing of your personal data.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us. We will respond within 30 days. Note that certain rights may be limited where we have a legal obligation to retain data (e.g., for law enforcement purposes).

The Service is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Any content depicting minors in sexual or exploitative contexts is immediately removed and reported to NCMEC and law enforcement. See our Terms of Service for our zero-tolerance CSAM policy.

Your data may be processed and stored in countries outside your country of residence, including countries that may not provide the same level of data protection. We use appropriate safeguards for international transfers, including Cloudflare's data processing agreements and standard contractual clauses where applicable.

We may update this Privacy Policy from time to time. We will indicate the date of the most recent update at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

For privacy-related inquiries, to exercise your data rights, or to report concerns:

• Email: [email protected]
• Contact page
• Support tickets