Your privacy, plainly.

Your images stay on your device

Compression, resizing, conversion and ZIP creation run in your browser. Selecting a file does not upload it to GooseBot. We do not receive the image contents or store copies of your processed images.

The browser holds files and results while you use a tool. Download the results you want to keep before leaving or reloading the page. Downloaded files remain wherever you save them on your device.

Using tools without an account

The compressor on the home page works without registration. It processes up to 10 images at a time. You do not need to provide a name or email address to use it.

Information saved with your account

If you register, GooseBot stores information needed to provide and secure your account:

• Your name, email address and whether the address has been verified.
• A password hash, rather than your readable password.
• Account and session identifiers, creation and expiry times, and session information that may include your IP address and browser user agent.
• Early-access applications, their status and invitation redemptions.
• Temporary verification and password-reset records. These links have an expiry time.

How account information is used

We use this information to sign you in, verify your email, help you reset your password, manage early access and protect account functions against misuse. Administrators can view member details and access applications. Passwords and active session tokens are not shown in the administration pages.

Cookies and technical requests

Sign-in uses authentication cookies so you can stay signed in as you move between pages. Blocking or clearing these cookies may sign you out or prevent account features from working.

The current application includes no advertising trackers or third-party analytics. Requests to load the site and use account features still reach the server; the server and hosting infrastructure may record technical request information. This is separate from the image processing that happens on your device.

Email and service infrastructure

Account emails include verification and password-reset links. They are sent through the email service configured for the installation. In the local development environment, these messages are captured by Mailpit rather than sent to your inbox.

Account records are held in the PostgreSQL database used by the installation. Do not share verification or password-reset links with anyone.

Managing and deleting your account

You can change your display name and delete your account in Account → Settings. Deleting an account removes its profile, login records, sessions, access applications and invitation-redemption records from the live account database.

Account deletion does not delete files you downloaded or emails already delivered. Email verification and reset records are stored separately and may remain after their links expire. This installation does not currently promise a fixed cleanup period for these records or infrastructure logs.

For questions about your account information or a deletion request you cannot complete in Settings, contact info@goosebot.top.

Changes to this page

The date above shows when this description was last updated. We will update it when the way the service handles information changes.