Privacy Policy
Last updated: October 2, 2026 ยท Version 1.2
Your GIF files stay on your device. The compression tool processes them in your browser. Website delivery involves our hosting and software CDN providers. Google Analytics on the homepage loads only if you allow analytics. Subscription data is collected only when paid plans become available.
1. Who is responsible for your data
GIF Optimizer at gif-optimizer.com is operated by Wu Zhenrong, an individual operating in China and the controller of personal information processed for this website.
- Privacy and support contact
- 932531647w@gmail.com
2. Information handled by the Service
- GIF files: Your browser reads selected files and generates previews and optimized output locally. The application does not send file contents or file names to our servers or include them in its analytics calls. Downloaded output is saved to the location you choose.
- Website requests: Hosting and content-delivery providers receive network information, such as your IP address, requested resource, request time, and browser headers, when delivering the website and its software.
- Analytics: If you allow analytics, the homepage loads Google Analytics 4 (measurement ID G-P7PMS7XJLW) to measure page views and interactions using browser and device information, referral information, and online identifiers. Our website configuration disables Google signals and advertising-personalization signals. GIF files and file names are not sent to Google Analytics.
- Communications: If you contact us, we receive the contact details and information you choose to include. Please avoid sending sensitive information or GIF attachments unless needed to resolve your request.
The application does not use account passwords or collect card details on this website. If you choose Pro, a server-side function creates a Waffo checkout session with a random purchase reference. We query Waffo for the subscription status, plan, current paid period, and payment or refund status needed to deliver Pro. Waffo collects your purchase email and billing information directly; we may view those records in its merchant dashboard when resolving billing requests. We do not maintain a separate customer or billing database.
3. Purposes and legal bases
Where data-protection law requires a legal basis, we process information to deliver the website and respond to service requests (performance of a contract or steps requested by you), protect the website and diagnose problems (legitimate interests), meet legal requirements (legal obligations), and measure website usage through optional analytics (your consent).
Analytics is off until you allow it. Rejecting analytics does not restrict GIF compression, previews, or downloads. You can withdraw consent using Analytics preferences in the footer of any page. Withdrawal stops future analytics collection from this browser and does not affect the lawfulness of earlier processing.
4. Cookies and analytics controls
The single-file and batch compression code does not persist your files or optimization settings between visits. ZIP archives are created in browser memory and downloaded to your device. We store your analytics choice in local storage on your device for 180 days; it contains the allow/reject choice and its expiry time, not a personal identifier. If storage is blocked, your choice applies only to the current page visit.
When you allow analytics, Google Analytics may set first-party cookies such as _ga and _ga_P7PMS7XJLW, with a configured lifetime of 180 days, which may refresh with activity. Cookie lifetime is separate from the server-side retention periods below. Rejecting analytics disables future collection and removes accessible Google Analytics cookies for this site. Previously collected data remains subject to the retention and privacy-rights provisions below.
These legal pages provide preference controls but do not load Google Analytics. You can also manage cookies and site storage through your browser and use Google's Analytics opt-out browser add-on where supported.
Essential billing cookie: When checkout is created, we set a signed, Secure, HttpOnly cookie containing a random purchase reference, valid for 30 days. It is necessary to verify your subscription in this browser and is separate from optional analytics. After payment, you can save a private recovery code, valid for one year, to restore access in another browser. Recovery codes are submitted only to our subscription verification endpoint; do not share them. Current subscription status is checked whenever access is restored.
5. Providers and disclosures
The website uses the following third-party services:
- Vercel: Website hosting, global CDN delivery, and server-side billing functions. The project uses the Hobby plan, has no separate visitor-log or billing database, and has no configured log drains. Billing functions process purchase references and Waffo status responses to create checkout and verify paid access. GIF file contents and file names are not transmitted to these functions. See Vercel's Privacy Notice and Data Processing Addendum.
- jsDelivr (Volentio JSD Limited, United Kingdom): Delivery of the GIF decoding and compression libraries through its CDN partners. These requests can include your IP address, browser headers, and the requested library URL, but do not include GIF file contents. See jsDelivr's Privacy Policy.
- Google: Google Analytics for consent-based usage measurement, and Gmail for support correspondence that you send us. See Google's Privacy Policy and Google's Analytics data-processing terms.
The current application contains no feature for selling your personal information or submitting GIF content to advertising partners. Providers may process request and usage information under their own policies. We may disclose information when required by law or to protect legal rights, and may transfer relevant records in a business transfer subject to applicable protections.
Waffo Pancake: Hosted checkout, recurring billing, payment confirmation, invoices, refunds, and the customer portal. Waffo and its payment partners collect and process payment and billing information directly. We do not receive full card numbers or card security codes. We use its order records to verify Pro access and provide billing support. Payment processing is necessary to fulfill your purchase and meet applicable accounting obligations. Waffo presents its applicable terms and privacy information within checkout and the customer portal.
6. Retention
| Category | Retention |
|---|---|
| GIF contents, file names, and previews | Held in browser memory while needed by the tool. The application does not persist them on our servers. Closing the page releases its processing context; your original files and downloads remain on your device until you delete them. |
| Application visitor logs | We do not create or retain a separate visitor-log database or export logs to another logging service. The billing functions do not intentionally log request bodies, recovery codes, buyer details, or checkout tokens. Infrastructure may produce operational records under Vercel's policies. |
| Vercel operational logs | The current Hobby plan provides a one-hour runtime-log viewing window, as documented in Vercel's Runtime Logs documentation. This is a dashboard limit, not a promise that every infrastructure or security record is deleted after one hour. Vercel's separate service and security records are retained for the purposes described in its Privacy Notice; it does not publish one fixed period for all such records. We have no log drains or external log archive. |
| jsDelivr delivery and usage records | jsDelivr retains non-aggregated usage records for analysis and abuse prevention, then deletes them unless security or legal needs require longer retention. Its published policy does not specify a fixed number of days for raw records. Aggregated statistics that are not associated with an individual request or user are retained indefinitely. We do not receive or archive raw jsDelivr request logs. |
| Google Analytics event data | Two months, under the current GA4 property setting. Expired event data is removed through Google's deletion process. This setting applies to detailed event data; standard aggregated reports are not subject to the same expiry. |
| Google Analytics user data | 14 months, under the current GA4 property setting. Where Google's reset-on-new-activity option applies, new activity can restart the retention period for a user identifier; it does not restart the age of every historical event. See Google's retention documentation. |
| Analytics preference and cookies | The saved allow/reject choice expires after 180 days. Analytics cookies have a configured lifetime of 180 days and can refresh with activity. You may clear them earlier or reject analytics from the footer. |
| Support correspondence | Up to 24 months after the request is resolved, then deleted unless a legal obligation or active dispute requires longer retention. |
| Subscription verification and recovery credentials | Our functions query current Waffo records on demand and do not persist a separate access database. The browser billing cookie lasts 30 days; a saved recovery code lasts one year. Access still requires a current paid subscription. Waffo retains its underlying order records according to its applicable legal and accounting requirements. |
| Transaction, refund, and billing-support records | Waffo retains transaction records as the payment provider under its applicable policy and legal obligations. Billing correspondence or records that we separately retain for accounting or disputes are kept for five years after the transaction, or longer where law requires, then deleted or anonymized. |
Records may be retained longer where required by law or needed for an active dispute, with access limited as appropriate.
7. Security and international processing
GIF processing remains on your device, reducing the need to transmit image content. The website references its external software over HTTPS. No internet service or device is completely secure; use an up-to-date browser and protect access to your own device.
The operator handles support and privacy requests in China. Vercel is a United States provider, and this project's build region is Washington, D.C., United States (iad1). Public files are delivered through Vercel's worldwide CDN, so the build region does not limit the countries through which visitor requests pass. jsDelivr is operated by a United Kingdom company and uses CDN partners worldwide. Google processes analytics and Gmail information on international infrastructure, including in the United States. Processing locations depend on the provider and the visitor's network route. Waffo checkout and order verification involve its international service infrastructure and payment partners; the applicable processing and transfer information is presented in its checkout privacy information. Our Vercel billing functions run in the United States (iad1). Your GIF contents and batch archives are not part of these transfers because they remain in your browser.
Vercel's Data Processing Addendum includes EU Standard Contractual Clauses and the UK transfer addendum for transfers to which those mechanisms apply, together with contractual security and access restrictions. Google publishes its international-transfer safeguards in its Privacy Policy and Analytics processing terms, including Standard Contractual Clauses where applicable. jsDelivr's policy describes its obligations to protect data transferred outside the United Kingdom or EEA; we do not represent that every CDN request uses a particular transfer mechanism. We restrict our processing to the stated purposes and will provide information about the applicable provider arrangements on request.
If a personal-data breach triggers notification obligations, we will notify affected individuals and authorities within the time required by applicable law.
8. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, receive a portable copy of, restrict processing of, or object to processing of your personal information, and to withdraw consent where processing relies on consent. You may also complain to your local data-protection authority.
Contact 932531647w@gmail.com to make a request. We may need to verify your identity and aim to respond within 30 calendar days, or sooner where required by applicable law. Where a lawful extension is necessary, we will explain it. We cannot retrieve GIF files that remain only on your device; you can delete your originals and downloaded files yourself.
9. Children and communications
The Service is not directed at children under 13, and we do not knowingly collect their personal information. Where local law requires a higher age or parental authorization, that requirement applies. If you believe a child has provided personal information to us, contact us so we can review and address it.
The current website has no marketing signup form or mailing-list feature. If you contact us, we use your details to respond to your request.
10. Changes and contact
We will update this page and its date when our practices change. Material changes will be announced on the website and, where required, before taking effect. For privacy questions or requests, contact 932531647w@gmail.com.
For the conditions of using the tool, see our Terms of Service.