Privacy Policy

This policy covers https://mb2kb.online and every page on it, from the compressors and the blog to the contact form. Using the site means you accept the practices described here. We collect very little, and none of it is your files.

Who we are

Mb2KbSizer is a free web tool built and operated by Naveed, a software engineer, who is the controller of the limited personal data the site handles. We have no native app, API or paid plan; this policy covers the website only. Reach us at mb2kbsizer@gmail.com or through the contact page.

Your files stay in your browser

Everything the compressors do happens inside your browser, in a background Web Worker on your own device. A photo or PDF you drop onto the page is read into memory, re-encoded there and offered back as a download. Nothing travels to mb2kb.online or anyone else; we never see, store or scan your documents, and the bulk tool’s ZIP is built locally too.

Because the browser re-encodes the picture, camera metadata such as EXIF fields and GPS coordinates is dropped from the compressed copy. Close the tab and both original and result leave memory unless you saved them. We keep no record that you compressed anything.

Contact form

The form at /contact-us asks for your name, email address, a topic and your message, and sends those four items to our mailbox by email; there is no database behind it. A hidden honeypot field and a rate limit keep spam out without recording anything about you.

We use your details only to reply, on the basis of our legitimate interest in answering people who write to us, and delete messages within twelve months of the last reply unless a thread must be kept for a legal claim. Please keep sensitive personal information out of messages.

Google Analytics 4

The site can use Google Analytics 4 after a measurement ID is configured. When enabled, GA4 helps us learn which pages and tools are used and roughly where visitors come from. It may record the page URL, referring site, browser and device type, screen size, approximate location and events such as “compression finished”. It never receives the content or name of your files, and we do not deliberately send identifying details.

Google states that for visitors in the EU, Switzerland and the UK it does not log or store individual IP addresses: the address is used only to derive a coarse location and is then discarded. When the property is enabled, event-level retention is set to the shortest available option and Google Signals and GA4 advertising features are kept off unless this policy and the consent choices are updated first.

With the same optional permission, our separate SitePulse live analytics records the page path, event time, referring hostname and a random session ID kept only in page memory for up to 30 minutes. It records page views and fixed actions such as a successful image, PDF or bulk compression and a download. URL query strings and fragments are stripped. File names, file contents, images, PDFs, compression results and contact-form entries are never sent in these events. Raw events are retained for up to 30 days and aggregate counts for up to 365 days.

Both analytics services stay off until you choose Allow analytics. You can change or withdraw this choice with Privacy choices in the footer. Withdrawing stops future events, clears pending SitePulse events and removes accessible Google Analytics cookies. The compressors work with either choice.

How Google uses data from sites that use its services is explained at https://policies.google.com/technologies/partner-sites. The opt-out add-on at https://tools.google.com/dlpage/gaoptout blocks Analytics in any browser.

Google AdSense and advertising cookies

The site is being prepared to use Google AdSense as its funding model. AdSense code and ad units are not loaded unless a publisher ID is configured. If advertising is enabled, third-party vendors including Google may use cookies and advertising identifiers to serve and measure ads, including personalised ads where you have consented and the law permits them.

Switch off personalised advertising from Google at https://www.google.com/settings/ads, and opt out of personalised ads from many other vendors at https://www.aboutads.info/choices/ or, in Europe, https://www.youronlinechoices.eu/. Other certified ad technology providers working with Google may also serve ads here; Google explains how it and its partners handle data at https://business.safety.google/privacy/.

Consent for the EEA, UK and Switzerland

When Google advertising is enabled, visitors from the European Economic Area, the United Kingdom or Switzerland are shown Google’s certified consent management platform so they can accept, refuse or choose purpose by purpose. The page also uses Google Consent Mode v2: the four signals (ad storage, ad user data, ad personalisation and analytics storage) start as “denied” in those regions and change only after a valid choice.

When the consent message is active, you can change your choice through the privacy controls shown on the site or by clearing the cookies for mb2kb.online and reloading. Google’s ad systems also honour the Global Privacy Control signal where applicable.

Cookies and local storage

Name	Set by	Type	Purpose	Lifetime
Consent cookies	Google’s consent tool, when enabled	Necessary	Remembers your banner choice	Until cleared
_ga, _ga_<container-id>	Google Analytics, when enabled	Analytics	Distinguishes visitors and keeps session state	Up to 2 years
IDE	doubleclick.net, when ads are enabled	Advertising	Ad serving and measurement	Up to 13 months in the EEA/UK and 24 months elsewhere
__gads, __gpi, NID, test_cookie	Google, when ads are enabled	Advertising, security, functional	Ad serving, frequency capping, abuse protection and cookie-support testing	Varies by cookie and region
Theme preference (local storage)	Mb2KbSizer	Necessary	Keeps your light or dark mode	Until you clear site data
mb2kb.analytics-consent.v2 (local storage)	Mb2KbSizer	Necessary	Remembers whether you allowed or declined optional analytics	Until you change it or clear site data

Names and lifetimes come from Google’s documentation and may change. The theme entry never leaves your browser.

Hosting and server logs

Our shared web host, like almost every web server, writes a standard access log: requesting IP address, date and time, URL fetched, response code, user-agent string and referring page. We use these logs only to keep the site secure and diagnose faults, on the basis of legitimate interest; the host keeps them for a short rolling period, and we do not combine them with other data.

Children

Mb2KbSizer is not aimed at children under 13, or under the higher age (up to 16) that applies to consent in some EEA countries, and we do not knowingly collect their personal data. If you believe a child has sent us a message through the contact form, email us and we will delete it.

Your rights

Wherever you live, you can ask what personal data we hold about you (in practice, only contact-form emails) and ask us to correct or delete it. In the EEA, the UK or Switzerland you can also restrict or object to processing, request portability, withdraw consent at any time and complain to your data-protection authority. Residents of California and other US states with privacy laws may know, delete and opt out of the sale or sharing of personal information through the opt-out links above.

Email mb2kbsizer@gmail.com from the address you used, so we can be sure the request is yours. We answer within 30 days and never sell personal data.

Security and links to other sites

The production site is configured to use HTTPS so pages and form submissions are encrypted in transit once the domain and certificate are active. The strongest file safeguard is the design: compressed files never reach our servers, so they cannot be exposed from our storage.

Articles link to official portals and technical documentation, whose privacy practices we neither control nor vouch for; check them before uploading anything there.

Changes and contact

When we change this page we update the “Last updated” date at the top and, for important changes, add a short note at the start; using the site afterwards means you accept the new version. Questions, access requests or complaints: mb2kbsizer@gmail.com, or use the contact form.