Privacy Policy

This Privacy Policy explains how xWebP acts as controller for account, billing, consent, and usage data and how we protect image files processed through the service.

We collect only the data needed to operate xWebP: email address and account data when you register, billing identifiers for subscriptions, consent choices, IP addresses for abuse prevention and rate limiting, usage logs for service security and product analytics, and newsletter subscription preferences if you opt in. We do not keep uploaded images after processing.

Uploaded images are processed temporarily in memory or short-lived worker storage and deleted after the result is returned or the processing session expires. We do not use uploaded files for model training, profiling, or resale.

Necessary storage is used for login sessions, language selection, security checks, and remembering your consent choices. Analytics and advertising technologies are disabled until consent is given. If you consent to marketing cookies, advertising resources from Adsterra (adsterra.com) and related measurement scripts may be loaded. You can withdraw or change consent at any time through Cookie Settings.

We may use specialized processors for payments, infrastructure, security, and advertising delivery. This includes Adsterra (adsterra.com) for advertising placements and related reporting. These providers act under their own contractual and privacy obligations. Where third-country transfers occur, they should be covered by appropriate safeguards such as Standard Contractual Clauses.

Account and subscription records are retained while your account is active and afterwards only for statutory retention or defense of legal claims. Operational usage logs are kept for a limited period needed for abuse prevention, troubleshooting, and reporting. Consent records are retained to demonstrate compliance until replaced or no longer required.

Depending on your jurisdiction, you may request access, rectification, erasure, restriction, portability, or objection regarding your personal data. You may also withdraw consent at any time without affecting prior processing, unsubscribe from newsletters, and lodge a complaint with a supervisory authority.

We use encrypted transport, access controls, environment separation, rate limiting, and audit-oriented logging to protect accounts and processed files. Access to personal data is limited to what is required for operation, support, and security.

Our service is not directed to children under 13. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page.

For privacy requests or questions about this policy, contact privacy@xwebp.com. If you need account deletion or a data export, use the same address and include the account email concerned.