Privacy Policy

Your images

When you compress an image, the file is uploaded to our server, processed entirely in memory, and the compressed copy is sent straight back to your browser. We do not write your images to disk, we do not log their contents, and we do not share them with anyone. Once your download is ready, the data is discarded.

We never use your images to train models, build datasets, or for any purpose other than producing the compressed file you asked for.

Accounts, the API and the Figma plugin

The website works without an account. An account is needed only for the Compresso API and the Figma plugin. For it we keep your email address, which we use to send sign-in links and codes, and the date the account was created.

Sign-in links and codes expire after 15 minutes and are stored only as irreversible hashes. Signing in to the dashboard sets one cookie that keeps you signed in for up to 30 days. API keys are stored encrypted, and the dashboard shows only their last four characters.

To apply the free daily allowance we count how many images each key compresses per day. To prevent abuse we also keep short-lived counters per IP address in memory; they are never written to disk. We keep a log of account actions, such as creating or revoking a key.

Sign-in emails are sent through Resend, our email provider, which receives your email address only to deliver them.

Images sent through the API or the Figma plugin are handled exactly like images on the website: processed in memory, returned in the same response, never stored or logged. The Figma plugin sends only the layers you export, together with your API key, to api.compresso.space. It keeps the key and your last export settings in Figma's local storage on your device, never inside your Figma files.

You can delete your account in the dashboard at any time. That removes your email address, sessions and sign-in codes, revokes and erases your keys, and deletes your usage history immediately. For the rest of that UTC day we keep a keyed hash of the address, only so that deleting the account and signing up again cannot reset the daily limit.

Analytics

We use Google Analytics and Yandex.Metrica to understand, in aggregate, which pages are visited and how the tool performs. Google Analytics runs only after you accept analytics cookies in the consent banner — if you decline, no Google analytics cookies are set. Yandex.Metrica loads by default to count visits; you can opt out with the Yandex.Metrica opt-out tool (yandex.com/support/metrica/general/opt-out.html) or by blocking it in your browser. Neither service ever receives your images.

Advertising

We may display ads through Google AdSense to keep the service free. Advertising cookies, where used, are also gated behind your consent. You can change your choice at any time by clearing the consent and reloading the page.

Contact

Questions about privacy? Email us at hello@compresso.space.