The short version
- We do not upload your images. Every tool on RoundCut runs in your browser using the HTML5 Canvas API and WebAssembly. Your files stay on your device.
- We do not set tracking cookies. We use Cloudflare Web Analytics, which collects aggregate traffic data without cookies and without identifying you.
- We do not sell, share, or rent personal data. There is no data to sell — we don’t collect it.
- You can verify everything yourself. Open your browser’s DevTools, switch to the Network tab, and watch no upload requests leave while you edit an image.
Who we are
RoundCut is operated as a personal project by an independent developer based in Brazil. For the purposes of GDPR and LGPD, the data controller can be reached at the email address in the Contact section below.
What information we process
Your images
When you use a tool — Circle Crop, Remove Background, Compress, or any other — your image is read by your browser, processed by JavaScript and WebAssembly running on your device, and the result is offered back to you for download. The image data is never sent to our servers, because there are no servers doing the work.
No version of the file is stored, cached, or logged on our infrastructure. When you close the tab, the image is gone from RoundCut entirely.
Site visit data
We use Cloudflare Web Analytics to understand which pages people visit, in aggregate, so we can prioritize improvements. Cloudflare Web Analytics is server-side and does not set tracking cookies, does not fingerprint your device, and does not assign you a persistent identifier.
The data collected is limited to: the page URL, the referring URL, your country (derived from your IP, not stored individually), the browser family (e.g. “Chrome 130”), and Core Web Vitals performance numbers. None of this is linked to a person.
Strictly-necessary cookies
Cloudflare, as our hosting and DNS provider, may set a small number of strictly-necessary
cookies to deliver the site and protect it from automated abuse (for example, the
__cf_bm bot-management cookie). These cookies are required for the site to
function and are not used for advertising or tracking. See the
Cloudflare cookie policy
for the full list.
Local browser storage
To make the site usable across visits, RoundCut stores small amounts of data in your
browser’s localStorage: your selected theme (light or dark), your preferred
language, and a flag indicating whether you’ve dismissed the language-switch suggestion.
This data never leaves your browser and is never visible to us.
Advertising (when enabled)
RoundCut is currently free of advertising. As the site grows, we plan to add a single, discreet ad slot below the tool surface on tool pages, served by Google AdSense. The home page, satellite pages, and legal pages will remain ad-free.
When AdSense is enabled, third-party vendors including Google may use cookies and web beacons to serve ads based on your prior visits to RoundCut and other websites. Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and other sites on the internet. You may opt out of personalized advertising by visiting Google’s Ads Settings, or by visiting aboutads.info for industry-wide opt-outs.
Until we explicitly announce that ads are enabled, no ad scripts run on the site.
Premium tier (future)
We plan to offer an optional paid “RoundCut Pro” tier in the future, processed through Lemon Squeezy as merchant of record. If you choose to subscribe at that point, Lemon Squeezy will process your billing details (name, email, billing address, payment method) under their own privacy policy as a sub-processor. We will only receive a confirmation that your license is valid, plus your email address for licensing communication.
Until the Pro tier launches, no payment information of any kind is processed by us or on our behalf.
Sub-processors
- Cloudflare, Inc. — DNS, edge hosting, web analytics, DDoS protection. Privacy policy.
- Google LLC (AdSense) — only when ads are enabled. Privacy policy.
- Lemon Squeezy (Lemon Squeezy LLC) — only if you purchase a Pro license in the future. Privacy policy.
Your rights
Depending on where you live, you may have rights under laws such as the EU’s GDPR, Brazil’s LGPD, the California CCPA/CPRA, and similar regulations. Those rights typically include:
- The right to access any personal data we hold about you
- The right to correct inaccurate data
- The right to delete data (“right to be forgotten”)
- The right to object to processing or to withdraw consent
- The right to data portability
- The right to lodge a complaint with a supervisory authority
Because we don’t collect personal data tied to you, most of these rights are satisfied by the design of the service itself. If you still have a request — for example, you’d like confirmation in writing that no data is held — email us using the details below.
Children
RoundCut is a general-audience tool and is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has somehow submitted personal information through the site, please contact us and we will delete it.
Changes to this policy
If we make material changes — for example, when AdSense is enabled or when the Pro tier launches — we’ll update the “Last updated” date at the bottom of this page and, where appropriate, post a notice on the home page.
Contact {#contact}
Questions about this policy or about how RoundCut handles data? Email support@araluma.com. We try to respond within five business days.