Cookies

These are required for the Service to work; they are not subject to consent.

• Session (img_web_session): keeps you signed in, for 90 days, renewed while you use the Service and never past one year.
• Your cookie choice (img_consent): remembers what you chose on the banner or on this page, for one year.
• Analytics reset (img_analytics_reset): set for two minutes after you sign out or change your cookie choice, so the next page clears analytics identity in this browser.
• Console preferences and history (local and session storage, never sent to us): your theme and the media view you chose, kept until you change them; the last console pages you opened, so Back shows them at once, forgotten when you sign out; and a notice carried across a reload, removed once shown.

We use PostHog Cloud EU for browser product analytics on eligible requests. Its environment-specific first-party persistence key is named ph_img_products_production or ph_img_products_test and may be stored as a cookie and in local storage for up to one year; our loader enforces that maximum for the local-storage copy as well as configuring the cookie lifetime. A separate __ph_img_products_production_consent or __ph_img_products_test_consent key stores the PostHog opt-in/out state. These maintain an anonymous or signed-in visitor identifier, session and device continuity, and analytics feature state without mixing test and production journeys.

For non-strict geolocations, browser analytics is available by default until you opt out. Strict or unknown geolocations require an explicit opt-in. Global Privacy Control disables tracking everywhere. Structured analytics events use opaque identifiers for your img.pro account, the App, and the storage that holds the images an event concerns. They remove account names, emails, raw URL queries, search terms, and ad-click identifiers; validated UTM source, medium, and campaign dimensions may be retained separately, while autocapture text is separately suppressed before event delivery. Session replay follows our PostHog project’s text/input masking setting and may include ordinary visible UI text and non-password input values. Matched media elements, hidden inputs, selected token/identifier-bearing elements, and designated private regions remain blocked client-side. Page, replay-timeline, network, and performance URLs handled by our sanitizer are reduced to query-free route templates or external origins; network request/response headers and bodies are removed in-browser before replay upload; session-replay console and canvas capture are disabled.

Turning off analytics and marketing (here, or with Reject all or Opt out of sharing on the banner) immediately tells PostHog to stop browser capture, resets its browser identity, removes its first-party cookie and local-storage state in this browser, and disables future anonymous browser-to-server journey linkage. It does not suppress the bounded pseudonymous server outcomes or Stripe billing-source records listed in the Privacy Policy, undo a transaction or revenue join already received, erase historical records, or clear storage on another device. Email privacy@img.pro for access, objection, or deletion requests.

Two cookies measure our Reddit ads: the Reddit click ID (rdt_cid), saved for 90 days when you arrive from a Reddit ad, and the Reddit pixel’s own cookie (_rdt_uuid), which Reddit keeps for 90 days. They load after explicit consent where prior consent is required (EU/EEA, United Kingdom, Switzerland, Brazil) or your location is unknown. Elsewhere they are available by default until you opt out. Reddit's server-side conversion processing is separate from this browser-cookie preference and is described in the Privacy Policy.

We honor the Global Privacy Control signal as an opt-out request for "sale" and "share" of personal information, in line with CPRA.

Change your analytics and marketing choice at any time with the buttons below; it takes effect on your next page load.

You can also block or clear cookies in your browser's settings, though clearing the strictly necessary session cookie will sign you out.