Privacy Policy
How GridCutter handles your data — and why the most important answer is: it mostly doesn't.
Your images never leave your device
GridCutter is a 100% client-side tool. When you upload a photo, it is processed entirely inside your browser using the Canvas API. No image data is ever sent to our servers — because we don't have image servers. This is not a marketing claim; it is a technical fact you can verify by opening your browser's Network tab.
Overview
GridCutter ("we," "us," or "our") operates the website at gridcutter.com. This Privacy Policy explains what information we collect when you visit, how we use it, and your rights regarding that information.
The short version: GridCutter is a static web utility. The heaviest lifting — image processing — happens entirely in your browser. The data we do collect (via standard server logs, Google Analytics, and advertising cookies) is minimal, industry-standard, and described in full below.
By using GridCutter, you agree to the practices described in this policy. If you do not agree, please discontinue use of the site.
Lawful Basis for Processing
Under GDPR Article 6, we process personal data (primarily through server logs, Google Analytics, and Google AdSense) based on two lawful bases:
Legitimate Interest (Article 6(1)(f))
We process server logs (IP address, browser type, access time) to prevent abuse, detect errors, and maintain security. We believe this legitimate interest outweighs privacy intrusion because: (1) logs are retained only 90 days, (2) we hold no sensitive personal data, and (3) processing is minimal and industry-standard.
Explicit Consent (Article 7)
For Google Analytics and Google AdSense cookies, we rely on your explicit consent. When you accept our cookie banner, you consent to these services. You can withdraw consent at any time by disabling cookies in your browser settings or opting out at Google Ads Settings.
If you have questions about our lawful basis for processing, please see our Data Processing page or contact us.
Data We Collect
We collect two broad categories of data: data generated automatically when you visit any website (server & analytics data), and data you voluntarily provide (if any). We collect no health, financial, or sensitive personal data.
Server Log Files
IP address, browser type, operating system, referring page, and timestamp. Standard for every web server. Not linked to any personal identity.
Analytics Data
Pages visited, time on site, feature interactions, and general device/browser category — collected via Google Analytics in anonymised, aggregated form.
Advertising Signals
Google AdSense may read or set cookies to serve relevant ads. These are managed by Google and governed by Google's Privacy Policy.
No Account Data
GridCutter has no user accounts. We collect no names, emails, passwords, or payment information from you directly.
Your uploaded images are never collected. They are read by your browser's Canvas API, sliced in memory, and written back to your device as downloads. Zero network requests are made with image data.
Cookies & Ads
GridCutter uses cookies for two purposes: site analytics (Google Analytics) and advertising (Google AdSense). We do not use cookies for authentication or to build first-party user profiles.
You can opt out of Google's personalised advertising via Google Ads Settings. You can also disable Google Analytics across all sites using the Google Analytics Opt-out Browser Add-on. Most browsers let you block or delete cookies entirely through their privacy settings.
Third Parties
We do not sell, trade, or rent your personal data to third parties. The third-party services we use — and the data they may receive — are:
Google Analytics
Receives anonymised visit data (pages, duration, device type). Governed by Google's Privacy Policy. You can learn more about how Google uses this data at policies.google.com.
Google AdSense
May set the DART cookie to serve ads based on your prior visits. You can opt out at adssettings.google.com.
Hosting / CDN
Our static files are served via a CDN provider. Server logs (IP, timestamp, user-agent) may be retained by the provider for security and abuse prevention.
Google Fonts
Font files are loaded from Google's servers, which may log your IP address. Alternatively, fonts fall back to system fonts with no external request.
Your Rights
Depending on your location, you may have rights under privacy laws such as the GDPR (EU), CCPA (California), or other regional legislation. These rights may include:
Right of Access
You can request a copy of any personal data we hold about you (primarily server log data tied to your IP address).
Right to Erasure
You can request deletion of your personal data. Note that most data we hold is anonymised and cannot be meaningfully linked back to a specific person.
Right to Opt Out of Ads
You can opt out of personalised advertising via Google Ads Settings or by disabling advertising cookies in your browser at any time.
Right to Complain
If you believe we have violated your privacy rights, you have the right to lodge a complaint with your local data protection authority.
Data Retention
Server log files are retained for up to 90 days for security and debugging purposes, after which they are automatically deleted. Google Analytics data is retained for 14 months by default, as configured in our Google Analytics account.
Since we hold no account data and no image data, there is nothing else to retain or delete on request beyond these standard log categories.
Children's Privacy
GridCutter is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
Policy Changes
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of the page. For significant changes, we will add a notice to the homepage. Continued use of GridCutter after changes are posted constitutes acceptance of the updated policy.
Contact
If you have any questions about this Privacy Policy or wish to exercise your rights, please reach out:
Privacy questions?
If you have a question about this policy, please email us at gridcuttertool@gmail.com. You can also use the contact page for general inquiries.