Cookie policy
Understand sign-in sessions, security verification, page memory and browser controls, and distinguish necessary cookies from optional tracking.
Necessary session cookies
The image-web-oauth cookie associates a login attempt; image-web-session identifies the resulting website session. Names use a __Host- prefix over HTTPS. They are HttpOnly and SameSite=Lax, with Secure on HTTPS, for authentication and security. They do not store original images.
Lifetime
The login-flow cookie holds short-lived state and is cleared after completion. Website sessions follow their server-defined validity; signing out clears the current session cookie. Browser records and server state determine expiry, after which you must sign in again.
Third-party verification and payment
Security checks, identity providers and billing portals may use their own cookies or similar technologies. Consult those services for their purposes and controls. Our explanation of necessary session cookies does not replace a third party's complete notice.
Task recovery storage
Cloud submission uses this tab's session storage for the account ID, filename, content and option digests, and request ID to avoid duplicate credit reservations on network retries. It does not store images or masks. After a reload, restoring a request requires the exact same file and selection. Clearing storage removes this recovery identifier. Check Tasks first when the submission status is uncertain.
First-party product measurement
This version has no advertising or third-party website-analytics SDK. The site uses first-party product events and a random sessionStorage identifier for the current tab to measure page, tool, task, download and checkout steps; the identifier expires when the tab closes. Events do not contain image contents, account identifiers or full referrer URLs, and browser Do Not Track and Global Privacy Control signals are respected.
Your controls
Use browser settings to inspect, delete or restrict cookies, or sign out of the site. Blocking necessary cookies can prevent sign-in and cloud features from working; local tools usually remain available. Clearing browser data does not automatically delete records held by account or payment services.
Contact support
The email link opens your mail app; it does not confirm a message was sent. Do not send passwords, verification codes or full card details.