Privacy Policy

Images and SVG files

Tracing runs in WebAssembly inside a Web Worker in your browser. We do not operate an upload API for source images or exported SVG. Opening a file with the picker, drag-and-drop, or paste keeps that bitmap in local memory for the session. Closing the tab discards it. We cannot recover your artwork from our servers because it was never sent there.

Static site hosting (currently Vercel / Cloudflare Pages) still receives normal HTTPS requests for HTML, JavaScript, CSS, fonts, and the WASM engine. Those requests do not include your picture.

Analytics (optional)

If your browser is not sending Do Not Track (DNT=1) or Global Privacy Control, the site may load:

• Google Analytics 4. Configured with IP anonymization, ads personalization off, and Google signals off. Events include page views plus product actions (image upload, trace start/complete/error, export, mode change). Parameters are limited to things like file format, tracing mode, approximate file size in KB, duration, and layer counts. Original filenames and pixel buffers are not sent.
• Microsoft Clarity. Used for aggregated interaction analytics. The converter preview is masked so session replay should not capture source or SVG pixels.

If DNT or GPC is enabled, the analytics loader skips injecting those tags. You can also block them with a content blocker. We do not run a cookie consent banner that re-enables tracking after you opted out via DNT/GPC.

Cookies and local storage

Theme preference uses localStorage key img2vector_theme. Locale uses img2vector-locale. GA4 and Clarity may set their own cookies when analytics is allowed - see Google and Microsoft’s documentation for those cookies. We do not sell personal data and we do not use analytics to build advertising audiences (allow_ad_personalization_signals is false).

Legal bases and international users

Pic2Vector is a free website without user accounts. Analytics, when active, is our legitimate interest in understanding whether the converter works (error rates, export completion) and which landing pages help people find it. You may refuse analytics via DNT/GPC or by blocking third-party scripts. We do not offer a data-export portal for “your images” because we do not store them.

Google and Microsoft process analytics data on their infrastructure. Their policies apply to that processing.

Children

The site is a general-purpose design tool. We do not knowingly collect personal information from children.

Contact form

If you use the contact form, the name, email address, and message you submit are sent to our email provider, Resend, and delivered to the site operator so we can reply. The form does not accept or transmit images or other files. Do not include confidential information in the message.

Changes and contact

We will change the “Last updated” date when this policy changes. Operator identity: see About.