Privacy Policy
How GridCutter handles your data — and why the most important answer is: it mostly doesn't.
Your images never leave your device
GridCutter is a 100% client-side tool. When you upload a photo, it is processed entirely inside your browser using the Canvas API. No image data is ever sent to our servers — because we don't have image servers. This is not a marketing claim; it is a technical fact you can verify by opening your browser's Network tab.
Overview
GridCutter ("we," "us," or "our") operates the website at gridcutter.com. This Privacy Policy explains what information we collect when you visit, how we use it, and your rights regarding that information.
The short version: GridCutter is a static web utility. The heaviest lifting—image processing—happens entirely in your browser. The only data we collect is the minimal, industry-standard information contained in server logs, which is necessary for security and site functionality and is described in full below.
By using GridCutter, you agree to the practices described in this policy. If you do not agree, please discontinue use of the site.
Lawful Basis for Processing
Under GDPR Article 6, we process a minimal amount of personal data based on our legitimate interest (Article 6(1)(f)) to maintain the security and functionality of the service.
This processing is limited to standard server logs (IP address, browser type, access time), which are used to prevent abuse, detect errors, and ensure the site is operating correctly. We believe this legitimate interest is necessary for providing the service and outweighs any privacy intrusion because the data is not used for tracking, is retained for only 90 days, and is not linked to any other personal information.
If you have questions about our lawful basis for processing, please see our Data Processing page or contact us.
Data We Collect
We collect only the data generated automatically when you visit our website (server log data). We collect no health, financial, or other sensitive personal data.
Server Log Files
IP address, browser type, operating system, referring page, and timestamp. Standard for every web server. Not linked to any personal identity.
No Account Data
GridCutter has no user accounts. We collect no names, emails, passwords, or payment information from you directly.
Your uploaded images are never collected. They are read by your browser's Canvas API, sliced in memory, and written back to your device as downloads. Zero network requests are made with image data.
Cookies
GridCutter does not use cookies for tracking, advertising, or analytics. The core functionality of the tool works without setting any cookies on your device.
The site uses `localStorage` in your browser for an essential site preference: remembering the last grid layout you selected. This data is stored only on your device, is not used to track you, and contains no personal information.
Third Parties
We do not sell, trade, or rent your personal data to third parties. Our site is served through a hosting provider and Content Delivery Network (CDN). These services may process standard server logs (containing your IP address, user-agent, and timestamp) for security and abuse prevention purposes, which is a standard and necessary part of operating a website.
Your Rights
Depending on your location, you may have rights under privacy laws such as the GDPR (EU), CCPA (California), or other regional legislation. These rights may include:
Right of Access
You can request a copy of any personal data we hold about you (primarily server log data tied to your IP address).
Right to Erasure
You can request deletion of your personal data. Note that most data we hold is anonymised and cannot be meaningfully linked back to a specific person.
Right to Complain
If you believe we have violated your privacy rights, you have the right to lodge a complaint with your local data protection authority.
Data Retention
Server log files are retained for up to 90 days for security and debugging purposes, after which they are automatically deleted.
Since we hold no account data and no image data, there is nothing else to retain or delete on request beyond these standard log categories.
Children's Privacy
GridCutter is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
Policy Changes
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of the page. For significant changes, we will add a notice to the homepage. Continued use of GridCutter after changes are posted constitutes acceptance of the updated policy.
Contact
If you have any questions about this Privacy Policy or wish to exercise your rights, please reach out:
Privacy questions?
If you have a question about this policy, please email us at gridcuttertool@gmail.com. You can also use the contact page for general inquiries.