Privacy

Your files

Exifo reads, cleans, edits and converts images entirely inside your browser. The files you add are never sent to a server, and there is no server-side code that could receive them. Processing happens in a background worker on your device, and results are handed to you as downloads.

When you close or reload the tab, the files and results held in memory are gone. Exifo does not keep a history.

What the app stores on your device

• Your light or dark theme choice, in local storage.
• Whether you allowed or declined analytics, in local storage.
• The app’s own files, in the browser cache, so it works offline after the first visit.
• If you share images to Exifo from your phone’s share menu, they are held briefly in the browser cache until the page opens them, then deleted.

There are no accounts and no advertising. Analytics runs only if you allow it, as described below.

Network requests

• The pages, scripts, fonts and image codecs are loaded from the same site that serves Exifo. Fonts are bundled with the site, so no font service is contacted.
• The Check tool loads the Content Credentials SDK from this site when a file has Content Credentials. Signatures are checked on your device and no trust list is downloaded.
• Maps are never loaded automatically. If you choose Show map or Open in OpenStreetMap for a photo’s location, OpenStreetMap receives map tile or page requests that reveal roughly where the photo was taken. Your file is not sent.
• If you allow analytics, your browser loads Google Analytics from googletagmanager.com and sends usage data to Google. See Analytics.

Analytics

Exifo asks before using Google Analytics. Nothing is loaded from Google until you choose Allow. If you decline, no analytics script runs and no analytics cookies are set.

If you allow it, Google Analytics receives:

• the pages you visit on Exifo, the page that linked you here, and how long you stay;
• your browser, device type, screen size and language;
• an approximate location derived from your IP address (Google Analytics does not store the IP address itself).

It sets first-party cookies named _ga and _ga_… that last up to two years. Google signals and ad personalisation are turned off. Google Analytics never receives your images, their file names or their metadata: files are processed on your device and are not part of any request.

You can change your choice at any time with Analytics settings in the footer. Declining removes the cookies. Google’s handling of this data is described in the Google Privacy Policy.

The web host that serves these pages may keep standard access logs, such as IP address, browser type and the page requested, as any website host does.

Metadata you download

Cleaned files contain only the blocks you chose to keep. Re-encoded files from the image tools (Compress, Convert, Resize and Watermark) contain no metadata except, where needed, the information required to display the image correctly, plus a small “Software: Exifo (exifo.app)” credit written into the file. The credit is on by default, is visible in Inspect and any EXIF viewer, and can be switched off with the Add Exifo credit toggle in each of those tools. It is only added to JPEG, PNG and WebP output, never to AVIF, and never to cleaned files. Exported reports contain the metadata of the files you exported; treat them as you would the original files.

Contact

Questions about this policy or your privacy can be sent to hello@exifo.app. This policy may be updated; the date above shows when it last changed.