Privacy Policy

Last updated: 22 October 2026

PicsPivot (picspivot.com) is a set of free online image tools. It is a brand of ToolsPivot, run by the ToolsPivot team and operated from India. This policy covers PicsPivot only. It explains where your images go when you use a tool, what we learn about your visit, who else is involved, and what you can ask us to do about it.

In brief

• Most tools never see your photo. 50 of our 58 tools process images inside your browser, on your own device. Nothing is uploaded.
• A few jobs need our server. HEIC and TIFF conversion, and some metadata jobs on formats a browser cannot read, send the file to our server. It is processed there by our own software, not sent to anyone else, and deleted on a short timer.
• Location data is your call. Browser tools drop EXIF metadata, including GPS coordinates, by default, and we give you tools to check and remove it.
• No account, no sale. PicsPivot has no sign-up, and we do not sell your personal information. Advertising pays for the site.

How your images are handled

Tools that run in your browser

Compressing, resizing, cropping, rotating, adjusting colour, blurring, watermarking, building collages and memes, splitting images, generating favicons, base64 encoding, SVG tracing, and converting between JPG, PNG, WebP, AVIF, GIF, BMP, ICO and SVG all happen on your device. The work is done by encoders compiled to WebAssembly (MozJPEG, OxiPNG, libwebp and libavif) that your browser downloads and runs locally. The image you open and the file you save never reach PicsPivot. We cannot see them, keep them or hand them to anyone.

The browser tools take up to 30 images per batch. How fast they run depends on your device.

Tools that use our server

Some image formats cannot be decoded reliably inside a browser. For these, your file is uploaded to our server:

• HEIC and TIFF converters (for example HEIC to JPG). These are the 8 server-side tools. Each file and its converted result are deleted within 30 minutes of the job starting, whether or not you downloaded the result. You can send up to 50 photos per batch, up to 100 MB per file, and up to 120 photos per hour.
• Remove Metadata from Photo strips JPG, PNG and WebP files in your browser. HEIC, TIFF and camera RAW files (and video or PDF files, if you add them) are sent to our server, cleaned there, returned to you, and the temporary copy is deleted when the request finishes.
• EXIF Viewer reads photos in your browser. If you open a video or PDF file in it, that file is read on our server and the temporary copy is deleted when the request finishes. If you ask it to load an image from a web address, our server fetches the image from that address on your behalf, so the site hosting it sees a request from our server, not from you.

Whenever a file reaches our server:

• It is processed by software running on our own server. Its contents are not sent to any third party, and we do not look through, reuse or train anything on your images.
• It is stored outside the public web directory, so it cannot be reached through a web address while it exists.
• Deletion is automatic. You do not need to ask, and we cannot recover a file once it has gone, so download your result promptly.

Photo metadata (EXIF and GPS)

Photos often carry hidden EXIF data: the camera or phone model, the date and time, and sometimes the GPS coordinates of where the picture was taken. Here is how PicsPivot treats it:

• Browser tools re-encode the image to produce your result, and that drops EXIF metadata by default. A compressed or converted photo from PicsPivot does not carry your original location data unless a tool tells you it keeps it.
• The EXIF Viewer shows you what a photo carries, so you can decide before sharing it.
• Remove Metadata from Photo removes metadata without compressing the picture again.
• We do not collect or store the location or camera details found in your photos.

What we learn when you visit

• Standard request data. Like any website, our servers record your IP address, browser and device type, operating system, the page that referred you, the pages and tools you use, and the time.
• A usage record. When a tool reaches our server, we log the tool, your IP address, the date and the input you gave it (for example a web address you asked the EXIF Viewer to load). We use this to stop abuse, enforce rate limits, fix faults and see which tools are used. It never includes the contents of your images.
• Analytics. We use Google Analytics and Microsoft Clarity to understand how the site is used. Clarity records session replays: a reconstruction of your visit, including mouse movement, clicks, scrolling and page changes, that can be played back. It masks text you type by default. Both services set their own cookies and only run as your consent choice allows.
• Messages you send us. If you use the contact form, we keep your name, email address and message, along with your IP address, browser user-agent and referring page, so we can reply and filter spam.

Please do not put passwords, payment details or other sensitive information into a tool or a message.

Cookies and your consent

On your first visit, a banner asks whether you accept or decline non-essential cookies. Essential cookies run regardless, because the site needs them. Analytics and advertising cookies follow your choice. You can also block or delete cookies in your browser settings, though blocking essential cookies may stop parts of the site working.

Advertising

PicsPivot is free because it shows ads through Google AdSense. Google and its partners may use cookies to show ads based on your visits to this and other websites. If you decline advertising cookies in our banner, ads may still appear, but they should not be personalised. You can manage personalised ads in your Google Ad Settings and read more in Google's advertising and privacy resources.

Services that support the site

These providers receive information about your visit, such as your IP address and browser details. None of them receives the images you process.

• Google AdSense for advertising.
• Google Analytics and Microsoft Clarity for analytics.
• Cloudflare, which sits in front of the site for security and caching, and Cloudflare Turnstile, which some tools use to confirm a visitor is human.

Each provider has its own privacy policy. We will keep this list up to date as it changes.

Why we use information

• To run the tool you chose and give you the result.
• To keep PicsPivot secure and available, including rate limits and bot protection.
• To find and fix problems and improve the tools.
• To answer your messages.
• To show the advertising that keeps the site free.
• To meet legal obligations and enforce our Terms of Service.

Where data protection law asks for a legal basis, we rely on your consent for analytics and personalised advertising cookies, which you give or refuse in the banner and can withdraw at any time, and on our legitimate interest in providing, protecting and improving the service for the rest.

How long we keep things

An automated job runs every day to delete records once their time is up.

We may keep information longer if the law requires it, or to resolve a dispute or enforce our Terms.

Your rights

Depending on where you live, for example under the GDPR in the European Union and the UK, the CCPA in California, or India's Digital Personal Data Protection Act, you may have the right to access, correct, delete or export your personal information, to object to or restrict some processing, to withdraw consent, and to opt out of the "sale" or "sharing" of personal information. We do not sell personal information.

To use any of these rights, email info@picspivot.com and we will respond as the law requires. Because PicsPivot has no accounts and most tools never receive your images, we may need some detail from you to find records about you, and often there will be nothing to find.

Security

The strongest protection is not receiving your images at all, which is why most tools run in your browser. Where a file does reach us, it is kept outside the public web directory and deleted on a timer, and old records are cleared by a daily job. API keys and secrets stay on the server, and rate limits and bot protection guard against misuse. No system is perfectly secure, so we cannot promise absolute security.

Children

PicsPivot is not aimed at children under 13, or under the minimum age in your country, and we do not knowingly collect their personal information. If you think a child has given us information, contact us and we will delete it.

Where information is processed

PicsPivot is operated from India, and the operator is responsible for how your information is handled. The infrastructure is spread across several countries:

• Our main servers are hosted with Oracle Cloud in Saudi Arabia, with a standby server that holds the same data.
• Cloudflare runs in front of the site worldwide and may cache pages and handle secure connections at a location near you.
• A relay server we operate in the United States may carry some outbound requests our server makes.
• Our advertising and analytics providers operate in their own countries, mainly the United States and Europe.

If you visit from the European Economic Area or the UK, information about your visit will be transferred outside it. We rely on the safeguards our providers offer for those transfers.

Changes to this policy

When our tools or providers change, we update this policy and the date at the top. If you keep using PicsPivot after an update, the updated policy applies.

Contact

For any question about this policy or your data, email info@picspivot.com or use our contact page. Our PDF tools live on our sister site DocuPivot, and our other free tools on ToolsPivot; each has its own policy.