← Back to Legal Hub

Privacy Policy

Last updated: February 24, 2026

Our Commitment to Your Privacy

At Imperial V3, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our image hosting services.

We believe in transparency and minimalism—we only collect what we need to provide you with a great service, and we never sell your data to third parties.

Information We Collect

Account Information

When you create an account, we collect:

  • Email address
  • Username and password (encrypted)
  • Payment transaction references (purchases are processed by SellAuth — we never see your full card details)

Usage Data

To provide and improve our services, we automatically collect:

  • IP addresses (for security and analytics)
  • Browser type and version
  • Device information (OS, screen resolution)
  • Upload timestamps and file metadata (size, format, resolution)
  • Per-upload expiry timers you set (deleteAfter date)
  • SHA-256 content hashes used for file deduplication
  • API request logs (endpoints accessed, response times)
  • Bandwidth and storage usage metrics
  • Session data: device type, browser, OS, IP address, approximate location (country/city)

Uploaded Content

We store the images and files you upload to our platform. While we don't actively scan or analyze your content, we may access it to provide support, investigate abuse reports, or comply with legal obligations.

How We Use Your Information

We use your information to:

  • Provide, maintain, and improve our image hosting services
  • Process payments and manage your subscription
  • Send you important service updates, security alerts, and billing notifications
  • Respond to support requests and troubleshoot issues
  • Detect and prevent fraud, abuse, and security threats
  • Analyze usage patterns to optimize performance and features
  • Comply with legal obligations and enforce our Terms of Service

Data Sharing and Disclosure

We do not sell your personal information to advertisers or third parties. However, we may share your data in the following limited circumstances:

Service Providers

We work with trusted third-party providers to deliver our services:

  • Cloudflare R2 — Image storage and CDN delivery
  • SellAuth — Payment processing for access key purchases
  • Discord — Optional OAuth login and account linking; if you connect your Discord account, we store your Discord ID, username, avatar, and OAuth tokens to maintain the integration
  • Resend — Transactional email delivery
  • Monitoring Services — Uptime and performance monitoring

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, prevent fraud, or ensure user safety.

Data Security

We implement industry-standard security measures to protect your data:

  • All data transmissions are encrypted with TLS/SSL
  • Passwords are hashed using bcrypt with strong salting
  • API keys and authentication tokens are stored securely
  • Regular security audits and vulnerability assessments
  • Access controls and logging for all administrative actions

While no system is 100% secure, we continuously work to protect your data from unauthorized access, disclosure, or loss.

Data Retention

We retain your data for as long as your account is active or as needed to provide our services:

  • Account data: Retained until you delete your account
  • Uploaded images: Stored until you delete them or your account is closed
  • Logs and analytics: Typically retained for 90 days, longer if required for security or legal reasons
  • Billing records: Retained for 7 years to comply with tax and accounting regulations

After account deletion, your images enter a 7-day grace period, after which they are permanently deleted.

Your Rights and Choices

You have the following rights regarding your personal data:

  • Access: Request a copy of all personal data we hold about you
  • Correction: Update or correct inaccurate information in your account
  • Deletion: Delete your account and associated data at any time
  • Export: Request a full machine-readable export of your account data, including uploads, folders, tags, API keys (metadata only), active sessions, security events, and webhooks. Sensitive fields such as password hashes, two-factor secrets, recovery codes, and raw OAuth tokens are excluded. The export is delivered to your registered email address.
  • Opt-out: Unsubscribe from marketing emails (service emails are required)

To exercise these rights, visit your account settings or contact us at [email protected].

Cookies and Tracking

We use cookies and similar technologies to:

  • Keep you logged in to your account
  • Remember your preferences (theme, language)
  • Analyze site traffic and performance
  • Prevent spam and abuse

You can control cookie settings in your browser, but disabling certain cookies may limit functionality.

International Data Transfers

Our services are hosted globally via Cloudflare's network. Your data may be processed in data centers located in various countries, including outside the European Economic Area (EEA).

For users in the EU/EEA, we ensure all international data transfers comply with GDPR by:

  • Using service providers that are GDPR-compliant and have appropriate safeguards
  • Implementing Standard Contractual Clauses (SCCs) approved by the European Commission
  • Ensuring adequate levels of data protection regardless of processing location

Data Protection Authority

Our lead supervisory authority is the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto):

If you are located in another EU/EEA country, you may also contact your local data protection authority.

Children's Privacy

Our services are not intended for users under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you of material changes via email or a prominent notice on our website. Continued use of our services after changes become effective constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Effective Date: February 24, 2026
This Privacy Policy applies to all users of Imperial V3 services.