This policy describes how SocialImageKit (socialimagekit.com) handles information when you visit the site, use the tools, or email us. It is written for a small independent website, not a large platform with user accounts. If a statement here no longer matches how the site works, treat the live behaviour as the thing to fix — and tell us.
Who is responsible
SocialImageKit is operated by [YOUR NAME] in [CITY, COUNTRY]. For privacy questions, emailhello@socialimagekit.com.
What data we collect
Information you send us
If you email hello@socialimagekit.com or use the contact form, we receive the name, email address, subject and message you enter, plus standard mail metadata (time, your mail provider). We use that only to reply and to keep a record of the request. We do not sell contact messages.
Information collected automatically
Like most websites, our host may log technical data such as IP address, browser type, date and the URL requested. Those logs exist to run and secure the site, not to build a marketing profile.
If analytics are enabled, they collect aggregate usage (pages viewed, referrers, approximate region). We will name the specific product here when it is installed. No analytics script is loaded on the site at the time this policy was last updated unless you have added one after reading the TODO above.
Images created in the tools
The OG Image Generator draws on a canvas in your browser. Titles, logos and background photos stay on your device unless you download the file yourself. We do not receive those images.
Link Preview Checker
When you use the Link Preview Checker, the public URL you enter is sent to a Cloudflare Pages Function so we can download that page’s HTML and read Open Graph tags. The function does not store the URL or the parsed result in a database. We do not write a history of checks. Short-lived edge cache (about five minutes for a successful response) and hashed rate-limit counters may exist so repeats are cheap and abuse is limited. We do not log the full URL or your IP in our application code.
The function only fetches http and https pages on ports 80 or 443. Private, loopback, link-local and metadata addresses are blocked. The request uses the SocialImageKitBot user agent and does not send your cookies or a forwarded client IP to the site you asked us to check.
Cookies and similar technologies
Cookies are small files stored on your device. Some are needed for the site to work; others are used by analytics or advertising partners if those features are turned on. Details, categories and browser controls are in the Cookie Policy.
Google AdSense and third-party advertising
This site may show ads served by Google AdSense and other third-party vendors. Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this website or other websites. Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet.
You may opt out of personalised advertising by visitingGoogle Ads Settingsand aboutads.info. You can also readHow Google uses information from sites or apps that use our services.
We do not control cookies set by advertisers. Their policies apply to the data they collect. Ads, if shown, are a way to pay for hosting; they are not a condition of using the free tools.
Analytics
Analytics, when present, help us see which pages are useful and which are broken. We prefer tools that minimise personal data. Until a product is named in this section, assume only host logs exist.
How we use information
- To reply to you and operate SocialImageKit.
- To fix bugs, abuse and security issues.
- To understand, in aggregate, whether the documentation is being read.
- To show ads if AdSense or a similar network is enabled.
We do not use contact messages to train public AI models.
Legal bases (EEA and UK)
If the UK GDPR or EU GDPR applies, we process data because it is needed to respond to a request you initiate (contact), because we have a legitimate interest in running a secure website (logs, security), or because you consent (non-essential cookies and personalised ads, when a consent banner is in place). You may withdraw consent for non-essential cookies in your browser or, once a consent tool ships, in that banner.
Your rights
GDPR (EEA and UK)
You may request access to personal data we hold about you, correction of inaccurate data, deletion, restriction of processing, and portability of data you provided, where those rights apply. You may also object to processing based on legitimate interests. Email hello@socialimagekit.com. You can complain to your local data protection authority.
CCPA / CPRA (California)
California residents may request to know, delete or correct personal information, and to opt out of “sale” or “sharing” of personal information as those words are defined in California law. We do not sell email addresses. If advertising cookies share identifiers with ad partners, you can opt out through the links in the advertising section above. We will not discriminate against you for exercising these rights. Email hello@socialimagekit.com and put “California privacy request” in the subject line.
We do not currently offer a login, so we may need to verify you via the email address you used to contact us.
Children’s privacy
SocialImageKit is not directed at children under 13, and we do not knowingly collect personal information from children under 16. If you believe a child has sent us personal data, emailhello@socialimagekit.com and we will delete it.
Data retention
Contact emails are kept as long as needed to resolve the request and for a modest period after that in case of follow-up (typically up to 24 months, unless a legal dispute requires longer). Host logs follow the hosting provider’s defaults, usually weeks rather than years. Downloaded images live only on your device.
Security
We use HTTPS and keep software reasonably up to date. No method of transmission or storage is completely secure. Do not send secrets (passwords, tokens, unpublished keys) through the contact form.
International transfers
[YOUR NAME] is in [CITY, COUNTRY]. Hosting, email and any analytics or ads vendors may process data in the United States or other countries. Where GDPR applies, those transfers rely on the vendor’s appropriate safeguards (for example Standard Contractual Clauses) as described in that vendor’s documentation.
Changes to this policy
We will change this page when the site’s behaviour changes. The “Last updated” date at the top is the date of the current version. Material changes (for example adding a server-side URL fetch) will be reflected here before we treat that feature as launched. The Link Preview Checker fetch is already described in this version.
Contact
Privacy requests: hello@socialimagekit.com. Operator: [YOUR NAME], [CITY, COUNTRY]. You can also use the contact page.