Privacy Policy
Last updated November 8, 2026. This policy explains what ImageToGif (imagetogif.app) processes, which providers process it and how long it is kept.
| Free browser tools | Selected files stay on your device; no AI provider receives them. |
|---|---|
| AI reference photo | The browser prepares a white-background JPEG. Our server and providers process it; we attempt to delete our copy at success, failure or review, subject to cleanup errors. |
| Prompts and task records | Stored for the generation workflow, safety checks and reconciliation; not deleted with the source photo. |
| Finished GIF | Stored privately for the owning account; not published in a public gallery. |
| Provider copies | Separate provider retention applies. Our deletion is not a promise of provider deletion or no training. |
| Optional analytics | Public-page analytics are separate from file processing. The footer switch turns optional analytics off in this browser. |
1. Operator and contact
ImageToGif is operated by Chen Wenjian, an individual operator in China. The operator is the data controller for this service. Privacy requests, deletion, safety reports and questions: support@imagetogif.app.
2. Browser tools
The GIF Compressor, GIF Resizer, WebP to GIF, Images to GIF and GIF Speed Changer process files only in your browser. Those files are not sent to us.
3. Accounts
You can sign in with Google or with an email and password. Accounts are handled by Better Auth on our own server; passwords are stored only as salted hashes. We store your name, email address, profile picture URL (Google sign-in), sign-in sessions, and the IP address and browser information of each session for security.
4. Necessary cookies
We use a first-party authentication cookie to keep you signed in. Sessions last up to 30 days and are renewed when you return; signing out ends the session. We do not use advertising cookies.
5. AI generation
When you create an AI GIF we process the photo you upload (resized in your browser before upload), your chosen motion or text, and the generated result. Your prepared photo is stored privately during processing. We attempt to delete our source-photo copy after success, confirmed failure or entry into review; a cleanup error can delay deletion. The finished GIF is stored privately for your account and is only available to you.
6. Providers and AI models
Cloudflare hosts the website and stores account, credit, order and generation records (Cloudflare D1) and private files (Cloudflare R2). During generation your photo is sent through a short-lived signed link to SeeAPI (GROWCRAFT PTE. LTD.) for image moderation and to fal to run GPT Image 2.6; text prompts are sent to SeeAPI for text moderation and, for text-to-GIF, to APIMart to run GPT Image 2.6. Results are checked by SeeAPI before delivery. Waffo Pancake acts as Merchant of Record for credit purchases and processes checkout, payment and refund information. Google provides sign-in when you choose it.
7. Why we process it
Account access, generation, delivery and purchases rely on performing our contract with you; safety checks, abuse prevention and security rely on our legitimate interests and legal obligations; accounting records rely on legal obligations.
8. Analytics
We use self-hosted Plausible, self-hosted PVUV and Google Analytics on public pages to understand visits. We send only public page paths and the referring website’s origin, not URL query strings, account, order or task identifiers, prompts or GIFs. PVUV receives only page-view events through our own Cloudflare-hosted service. A random identifier in sessionStorage groups visits within a browser tab and expires after 30 minutes of inactivity; disabling analytics clears it. We do not load the PVUV automatic tracking script or send it account identifiers, form contents, device fingerprints or behavior recordings. Its server derives basic device and geographic information from requests and stores hashed IP information for traffic-quality analysis. Google Analytics may use analytics cookies; advertising signals and automatic enhanced measurement are disabled. We also use Microsoft Clarity for masked heatmaps and session recordings on public pages with clean URLs. All text and images are masked, advertising and analytics cookie consent are denied for Clarity, and recording stops when you start entering or uploading content or navigate within the app. Account, checkout and private result pages are excluded. You can disable all optional analytics for this browser using the “Analytics” switch in the footer. Google and Microsoft process the analytics data described here under their privacy policies. Our host Cloudflare may also record basic request statistics.
9. Storage and retention
We attempt deletion of our uploaded-photo copy after success, confirmed failure or entry into review. Cleanup errors can delay deletion. Results are kept privately for your account until you ask us to delete them or close your account. Generation records keep the motion, prompt text, status, safety-check references and provider cost so we can reconcile failures and refunds. Server logs are kept by Cloudflare under its own retention.
10. Model training and sharing
We do not sell personal information, do not use your photos or results to train models, and do not publish them or use them in marketing. Providers process data under their own terms; we do not promise provider-side zero retention.
11. Transaction and credit records
For purchases we store your account and buyer email, order and payment references, the pack, amounts, currency, status and timestamps, and the payment and refund events received from Waffo, plus credit-ledger entries. We never receive or store full card numbers or security codes. These records are kept as long as required for accounting, tax, fraud prevention and disputes.
12. Provider retention and deletion requests
Providers control retention of their own input, output and moderation records under separate terms. Provider copies and generated-media links may persist after we delete our source-photo copy; we do not promise zero retention or automatic provider deletion. Send access or deletion requests from your account email. We review verified requests for data under our control, subject to applicable obligations, and can request deletion from providers; provider completion and timing are not guaranteed.
13. International processing and security
The operator accesses service records from China. Cloudflare, fal, APIMart, SeeAPI and Waffo may process data in other countries, including the United States. We use HTTPS, password hashing, private storage, short-lived signed links, ownership checks and server-side credentials. No system is completely secure; where required by law we notify affected people and authorities of qualifying breaches.
14. Your rights
Depending on where you live, you may request access, correction, deletion, restriction or portability of your data, or object to processing. Email support@imagetogif.app from your account email. You may also complain to your local data protection authority.
15. Children
The service is for people aged 18 and over. Photos of children are not accepted.
16. Changes
We publish the updated version and effective date on this page and announce material changes on the site before they take effect.
Questions? support@imagetogif.app