Privacy Policy
Last updated: July 20, 2026
Your Privacy Matters
Smart Photo Cropper is committed to protecting your privacy. This policy explains how we handle your data when you use our photo cropping and Google Photos integration services.
Information We Collect
Photos and Images
- Uploaded Photos: We process photos you upload for cropping and enhancement
- Processing Data: Temporary data created during photo detection and cropping
- Client-Side Only: All photo processing happens in your browser - photos are never stored on our servers
Google Photos Integration
- OAuth Authentication: Secure authentication tokens for Google Photos access
- User Profile Information: Your email address and basic profile information for authentication
- Photo Upload Access: Permission to upload photos directly to your Google Photos library
- No Album Creation: We only upload photos to your main library (no custom albums are created)
- Upload Metadata: Basic information about uploaded photos (filename, description with our app name)
Analytics and Usage
- Usage Statistics: Anonymous data about feature usage and performance
- Error Tracking: Technical errors to improve app reliability
- Session Data: Basic session information for analytics
How We Use Your Information
✅ What We DO
- • Process photos in your browser only
- • Upload photos to your Google Photos
- • Improve app performance and features
- • Provide technical support
❌ What We DON'T Do
- • Store your photos on our servers
- • Share photos with third parties
- • Sell your personal data
- • Access your photos without permission
Google Photos Integration
OAuth Permissions
When you connect Google Photos, you grant us the following permissions:
- • photoslibrary.appendonly: Upload photos to your Google Photos library
- • userinfo.email: Access your primary Google Account email address
- • userinfo.profile: Access your basic profile information (name, profile picture)
Note: We do not create custom albums. Your photos are uploaded directly to your main Google Photos library.
Data Handling
- Secure Transfer: All data is transmitted securely using HTTPS
- No Server Storage: Photos are sent directly from your browser to Google
- Token Management: OAuth tokens are stored locally in your browser
- User Information: Your email and profile information are stored locally for authentication display
- Revocable Access: You can revoke permissions at any time in your Google Account settings
- Photo Descriptions: Uploaded photos include descriptions mentioning "smartphotocropper.com" and timestamp
Third-Party Services
Google Photos API
We use Google Photos API to upload your cropped photos. Your photos are subject to Google's Privacy Policy.
Google Analytics
We use Google Analytics to understand how users interact with our app. This helps us improve the user experience. Analytics data is anonymous and aggregated.
Microsoft Clarity
We use Microsoft Clarity for aggregated behavior analytics, heatmaps, and session replays to improve usability. Clarity loads only after you accept analytics cookies. The editor is masked so your uploaded photos are never captured or sent to Clarity. Clarity acts as a data controller under the Microsoft Privacy Statement.
Data Security
Technical Safeguards
- • HTTPS encryption for all data transmission
- • Client-side processing (no server storage)
- • Secure OAuth 2.0 authentication
- • Regular security updates and monitoring
Your Control
- • Revoke Google Photos access anytime
- • Clear browser data to remove local storage
- • No account creation required
- • Process photos offline in your browser
GDPR Compliance & Legal Basis
Legal Basis for Processing
Legitimate Interest (Article 6(1)(f)): Analytics and app improvement
Consent (Article 6(1)(a)): Cookie usage and Google Photos integration
Contractual Necessity (Article 6(1)(b)): Providing photo cropping services
Data Retention
- • Photos: Never stored (processed locally)
- • Analytics: 26 months (Google Analytics default)
- • Session replays: 30 days (Microsoft Clarity; sampled replays up to 9 months)
- • Cookies: 7 days to 2 years (depending on type)
- • OAuth tokens: Until revoked by user
Data Transfers
- • Google Analytics: USA (adequacy decision)
- • Microsoft Clarity: EU via Microsoft Ireland (SCCs); stored in Microsoft Azure
- • Google Photos: Varies by user location
- • Our servers: EU-based hosting
- • Photos: Direct browser-to-Google transfer
Data Protection Contact
For data protection inquiries: privacy@smartphotocropper.com
Response time: Within 30 days as required by GDPR
Your Rights Under GDPR
Right to Access
Request a copy of your personal data and information about how we process it.
Right to Rectification
Correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure
Request deletion of your personal data under certain circumstances.
Right to Portability
Receive your personal data in a structured, machine-readable format.
Right to Object
Object to processing of your personal data for direct marketing or other purposes.
Right to Withdraw Consent
Withdraw consent for processing that is based on consent at any time.
Exercise Your Rights: Visit our Data Rights Center to submit requests or contact us at privacy@smartphotocropper.com
Your Control
You have the right to:
- • Access: Know what data we collect and how it's used
- • Control: Manage your Google Photos integration permissions
- • Delete: Remove your data by clearing browser storage
- • Portability: Export your cropped photos from Google Photos
- • Withdrawal: Revoke consent and stop using our services
Updates to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this policy.
We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Google API Services User Data Policy Compliance
Important Compliance Notice
Google API Data Usage Compliance: This application's use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited use of user data requirement of the Photos API User Data and Developer Policy.
Our Commitments:
- • We only request minimal permissions necessary for core functionality
- • We do not use your data to train AI/ML models
- • We do not share your Google data with third parties
- • We do not use your data for advertising purposes
- • We only access data that users explicitly authorize
- • All data access is transparent and user-controlled
Third-Party Services
Google Services
Google Photos is a trademark of Google LLC. We integrate with Google Photos through official APIs to provide photo upload functionality. This integration is governed by Google's privacy policies in addition to ours.
Use of Google trademarks does not imply any affiliation with or endorsement by Google LLC.
Quick Links
Contact Us
If you have any questions about this Privacy Policy, please contact us:
Email: info@smartphotocropper.com
Website: https://smartphotocropper.com
Support: Available through our website contact form