Privacy Policy

Last Updated: January 27, 2026

This Privacy Policy describes how kinja-img.com ("Service", "we", "us", "our") collects, uses, and shares information when you use our image hosting service. By using the Service, you agree to the collection and use of information in accordance with this policy.

Summary

We collect minimal data necessary to operate the Service. We log IP addresses for security. Uploaded images are publicly accessible. We do not sell your personal information. We may share data with law enforcement when legally required.

1. Information We Collect

1.1 Information You Provide

Uploaded Content: Images and files you upload to the Service
Metadata: Any metadata embedded in uploaded files (EXIF data, etc.)

1.2 Information Collected Automatically

When you access the Service, we automatically collect:

Data Type	Purpose	Retention
IP Address	Security, abuse prevention, rate limiting	90 days (logs), indefinitely (abuse records)
User Agent	Service optimization, bot detection	90 days
Request URL	Service operation, analytics	90 days
Timestamp	Logging, debugging	90 days
Referrer	Analytics, hotlink detection	90 days

1.3 Cookies and Similar Technologies

We use minimal cookies for:

Session Management: CSRF protection tokens
Preferences: Your selected settings (if any)

We do not use third-party tracking cookies or advertising cookies.

2. How We Use Your Information

We use collected information to:

Provide, maintain, and improve the Service
Process and host your uploaded images
Detect, prevent, and address abuse, fraud, and security issues
Enforce our Terms of Service
Comply with legal obligations
Respond to law enforcement requests
Generate aggregate, anonymized analytics

3. Public Nature of Uploaded Content

Important

All images uploaded to kinja-img.com are publicly accessible by default. Anyone with the URL can view your uploaded images. Do not upload sensitive, private, or confidential images unless you understand and accept this risk.

Specifically:

Uploaded images can be accessed by anyone with the direct URL
Images may be indexed by search engines
Images may be cached by CDNs, proxies, and third-party services
Once shared, we cannot control further distribution of your images
Deleted images may persist in caches and backups

4. Information Sharing

We do not sell, rent, or trade your personal information. We may share information in the following circumstances:

4.1 Service Providers

We use third-party services to operate the Service:

Cloudflare: CDN, DDoS protection, DNS (see Cloudflare Privacy Policy)
Hosting Providers: Server infrastructure

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to:

Valid legal process (subpoenas, court orders, warrants)
Requests from law enforcement agencies
To protect our rights, privacy, safety, or property
To investigate potential violations of our Terms of Service
To report illegal content (e.g., CSAM to NCMEC)

4.3 Business Transfers

If the Service is acquired or merged with another entity, your information may be transferred as part of that transaction.

5. Data Retention

Uploaded Images: Retained until deleted by user or removed by us
Server Logs: 90 days
Abuse Records: Indefinitely (for repeat offender prevention)
Backup Data: May persist for up to 30 days after deletion

We may retain certain information longer when required by law or for legitimate business purposes (e.g., legal claims, audits).

6. Data Security

We implement reasonable security measures to protect your information:

HTTPS encryption for all connections
Regular security updates and patches
Access controls and authentication
DDoS protection via Cloudflare

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

7. Your Rights and Choices

7.1 Access and Deletion

You can delete your uploaded images if you have the delete token
You can request information about data we hold about you
You can request deletion of your data (subject to legal retention requirements)

7.2 GDPR Rights (EU Users)

If you are in the European Economic Area, you have rights under GDPR including:

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing

To exercise these rights, contact: [email protected]

7.3 CCPA Rights (California Users)

California residents have additional rights under CCPA:

Right to know what personal information is collected
Right to know whether personal information is sold or disclosed
Right to say no to the sale of personal information (we do not sell)
Right to request deletion of personal information
Right to non-discrimination for exercising rights

8. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected information from a child under 13, we will delete that information promptly.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using the Service, you consent to such transfers.

10. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated "Last Updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Do Not Track

We do not respond to Do Not Track (DNT) signals. However, we do not engage in cross-site tracking.

13. Contact Us

For questions about this Privacy Policy or to exercise your rights:

Privacy inquiries: [email protected]
Data deletion requests: [email protected]
Abuse reports: [email protected]
DMCA requests: [email protected]

Questions?

If you have any questions about this Privacy Policy or how we handle your data, please contact us at [email protected].