Privacy Policy

imgland ("the Service", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

imgland operates from the United Kingdom. You can reach our data controller via the privacy contact form.

1. Data We Collect

1.1 Image Uploads

When you upload an image, we collect and store:

• The image file itself
• Upload metadata: timestamp, file size, file type, and image dimensions
• Your IP address at the time of upload (for abuse prevention and legal compliance)

We do not require an account, email address, or any other personally identifying information to use the Service.

1.2 Automatically Collected Data

When you visit imgland, our servers automatically collect:

• IP address
• Browser type and version
• Operating system
• Referring URL
• Pages visited and time spent
• Device type

1.3 Cookies and Tracking Technologies

We use the following third-party analytics services:

• Google Analytics (GA4) — To understand how visitors use the Service, including page views, session duration, and traffic sources. Google Analytics uses cookies and may transfer data to servers in the United States. Google's privacy policy applies to data processed by Google Analytics.
• Mixpanel — To analyse product usage patterns and improve the Service. Mixpanel may use cookies and similar technologies to collect interaction data.

These analytics cookies are not strictly necessary for the operation of the Service. In accordance with the UK Privacy and Electronic Communications Regulations (PECR) and UK GDPR, we will only set these cookies after obtaining your explicit consent via our cookie consent banner.

You may withdraw your consent at any time by clearing your cookies or using our cookie preferences settings. Strictly necessary cookies (e.g., for basic site functionality) do not require consent and cannot be disabled.

2. How We Use Your Data

We process your data for the following purposes:

• Providing the Service — Hosting and serving your uploaded images (legal basis: legitimate interest)
• Abuse prevention — Logging IP addresses to prevent misuse and comply with UK law, including the Online Safety Act 2023 (legal basis: legitimate interest and legal obligation)
• Legal compliance — Cooperating with law enforcement where required by law, particularly regarding illegal content (legal basis: legal obligation)
• Analytics — Understanding usage patterns to improve the Service (legal basis: consent)

3. Data Retention

• Uploaded images are retained until deleted by the uploader (where deletion functionality is available), removed for Terms violation, or removed at our discretion.
• IP address logs are retained for up to 12 months, unless required to be retained longer for legal proceedings or law enforcement requests.
• Analytics data is retained in accordance with the retention settings of each analytics provider (Google Analytics: default 14 months; Mixpanel: as configured).

4. Data Sharing

We do not sell your personal data. We may share data with:

• Law enforcement agencies — Where required by law or in response to valid legal requests, including requests from the National Crime Agency (NCA) regarding illegal content
• Service providers — Third-party providers who assist in operating the Service (hosting, CDN, analytics), bound by data processing agreements
• Regulatory bodies — Including Ofcom, the Information Commissioner's Office (ICO), and the Internet Watch Foundation (IWF), as required by the Online Safety Act 2023 and other applicable legislation

5. International Data Transfers

Some of our service providers (including Google and Mixpanel) may transfer data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner
• Transfers to countries with an adequacy decision from the UK Secretary of State

6. Your Rights (UK GDPR)

Under the UK GDPR and Data Protection Act 2018, you have the following rights:

• Right of access — Request a copy of the personal data we hold about you
• Right to rectification — Request correction of inaccurate personal data
• Right to erasure — Request deletion of your personal data ("right to be forgotten")
• Right to restrict processing — Request that we limit how we use your data
• Right to data portability — Receive your data in a structured, commonly used, machine-readable format
• Right to object — Object to processing based on legitimate interests
• Right to withdraw consent — Where processing is based on consent (e.g., analytics cookies), you may withdraw consent at any time

To exercise any of these rights, contact us at: our privacy contact form

We will respond to your request within one month. In complex cases, we may extend this by a further two months, in which case we will inform you.

7. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Telephone: 0303 123 1113

8. Children's Privacy

The Service is not directed at children under 18. We do not knowingly collect personal data from children. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete that data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top indicates the most recent revision. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions or data requests: our privacy contact form