At a glance
- Araluma has no accounts, no sign-up and no newsletter. We never ask for your name or e-mail address to use a tool.
- Some tools edit your picture inside your browser. Others send it to servers we operate so the heavy work can be done there. Each case is listed below, tool by tool.
- Pictures sent to our servers are used only to produce your result. They are deleted automatically, usually within a couple of hours, and are never used to train AI models.
- To measure how the site is used we record anonymous events (which tool, how long it took, whether it failed).
- Araluma is funded by ads from Google AdSense. Google and other ad vendors use cookies to choose those ads, and you can refuse or limit them as described under Advertising.
- Questions or requests about your data go to support@araluma.com.
Who is responsible for your data
The data controller for araluma.com, as the term is used in the GDPR (European Union), the LGPD (Brazil) and the CCPA/CPRA (California), is the operator of Araluma, based in Brazil. The single channel for anything related to personal data is support@araluma.com. Help with the tools themselves is handled at support@araluma.com.
Araluma is a small-scale processing agent under Brazil’s Resolução CD/ANPD nº 2/2022. That status waives the formal appointment of a Data Protection Officer (Encarregado), so the privacy address above acts as the direct line between you and the controller (Art. 11 of that resolution, Art. 41 §2 of the LGPD).
Your pictures, tool by tool
Tools that stay in your browser
Circle Crop, Crop Image and Resize do all of their work on your own device. The file is read by the browser, edited on a canvas and saved back to your disk. No copy of the picture reaches us.
Single-file conversions (for example PNG to JPG or WebP to PNG) and a PDF made from one image are also produced in the browser. The exceptions are covered in the next section.
Tools that use our servers
Compress. Every compression job is processed on our servers, because server encoders give smaller files at the same quality. Your images are uploaded to temporary Cloudflare R2 storage and processed on a server we rent from Hostinger in São Paulo, Brazil. To have results ready sooner, the tool may start uploading your images as soon as you add them, before you press the button, and discards them if you change the files or leave the page. SVG files and very large batches stay in the browser. If our servers cannot be reached, the tool falls back to compressing in the browser.
Conversions with AVIF output, and batch conversions (two or more files) go through the same servers. A PDF made from two or more images is assembled there too. These uploads may also start as soon as you add the files.
Background Remover. Your image is sent to our Cloudflare Worker, cut out by Cloudflare’s image segmentation model and returned to you. If that route fails, a second route sends the image to ImageKit, which processes it and deletes the uploaded copy right after. If both fail, a model we host is downloaded to your browser and the cutout is made on your device. Very large files are shrunk in the browser before upload.
Upscale. Your image is sent to our Cloudflare Worker and enlarged by Cloudflare’s image service. A second route uses ImageKit. The copy uploaded to ImageKit on that route stays in ImageKit’s storage so repeated requests can be served from cache, and it is not deleted automatically today. You can ask for its deletion at support@araluma.com. If both routes fail, the enlargement is made in your browser.
Share links and cloud saves. When you create a share link, save a result to Dropbox, or finish a Background Remover or Upscale job, the result file is stored on our temporary storage so it can be downloaded or opened by the link.
How long pictures are kept
| What | Where | How long |
|---|---|---|
| Uploaded originals for Compress, Convert and PDF | Cloudflare R2, then our server in Brazil | Deleted automatically within about two hours. The download screen also has a button to delete them at once. |
| Background Remover upload | Cloudflare R2 | Deleted as soon as the cutout is returned |
| Background Remover result | Cloudflare cache | Up to one hour, so the same image is not processed twice |
| Upscale result | Cloudflare cache | Up to seven days, for the same reason |
| Share links and saved results | Cloudflare R2 | About two hours, then the link stops working |
We do not look at your pictures, we have no process that surfaces them to anyone, and we never sell them or use them to train models.
Legal basis: performance of the service you asked for (LGPD Art. 7, V, GDPR Art. 6(1)(b)) and our legitimate interest in running it reliably and without abuse (LGPD Art. 7, IX, GDPR Art. 6(1)(f)).
Measuring how the site is used
Our own measurement system sends small events from the page to our Cloudflare Worker, which stores them in Cloudflare Workers Analytics Engine. An event says which tool was used, the step and how long it took, the page language, the kind of error when something fails, the site that referred you (host name only) and the connection type. The browser adds a random identifier that lives only in the current tab and is discarded when the tab closes. The Worker adds country, the Cloudflare data center, device type, operating system, browser family and network operator (ASN). It does not store your IP address. An event also records whether the tool finished, failed or was left before the end (and in which state: processing, done but not saved, or editing), and which of our processing routes handled it. It may carry a random id for the current run of a tool, created in your browser and replaced each time you start over. When a link carries a source tag (utm_source) and the browser reports no referring site, that tag is recorded instead. For a file you add, only its format and a size range are kept. For each file you download, we record technical properties so we can spot files that will not open on some devices: its format, its encoding profile (for AVIF the AV1 profile, chroma subsampling, bit depth and transparency, for JPEG progressive or baseline and chroma subsampling, for PNG the colour type and bit depth, for WebP lossless or lossy and transparency), a band for its longest side (up to 2,048, 4,096, 8,192 or 16,384 pixels, or larger), whether its dimensions are even or odd, and which of our quality rules it broke, if any. The file name, exact dimensions, byte size, pixels and photo metadata are never recorded. The event can also note what your browser supports: whether it opens AVIF, WebP and JPEG XL, and ranges for memory, processor cores and screen density, and events that carry these ranges leave out the network operator. When a request looks automated, the Worker keeps the first 80 characters of the browser’s identification string (user agent) so bots can be told apart. Events are kept for 90 days, after which only anonymous totals remain.
We also collect page timing figures (Core Web Vitals) and technical errors. Error reports (error message, page address, the tab identifier, country, device and operating system) are forwarded to Sentry, our error-monitoring service. Browsers that send Do Not Track, and automated browsers, are left out of this measurement entirely. Cloudflare Web Analytics, which is cookieless, may also count page views. Before an error report leaves the page, file names and web addresses are removed from its message. Your IP address is not forwarded to Sentry, which keeps the reports for up to 30 days.
Legal basis: legitimate interest in keeping the tools working and understanding their use in aggregate (LGPD Art. 7, IX, GDPR Art. 6(1)(f)). We have documented the balancing test behind it.
Cookies and browser storage
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
araluma_locale | Cookie | Remembers the language you chose | 1 year |
__cf_bm and similar | Cookie set by Cloudflare | Bot protection, strictly necessary | Short, set by Cloudflare |
theme | Local storage | Light or dark theme | Until you clear it |
rc-sid | Session storage | Random tab identifier for measurement | Until the tab closes |
rc-drive-token | Session storage | Google Drive access, only if you use the Drive picker | Until the tab closes |
| Language suggestion and reload flags | Session storage | Avoid repeating a notice or a reload | Until the tab closes |
None of these is used for advertising or to follow you across sites. Advertising cookies are set by Google and its partners, not by us, and are covered under Advertising below. Strictly necessary items need no consent under the ANPD cookie guide (2022). See Cloudflare’s cookie policy for the cookies it sets.
Google Drive and Dropbox
If you open a file from Google Drive or Dropbox, or save a result to Dropbox, the picker is loaded from Google or Dropbox at that moment and you sign in with them directly. We receive only the file you pick or the permission to save the one you send. Their own privacy policies apply to what happens in their windows.
Abuse prevention
To keep the free tools available, our Workers count requests per IP address per day in Cloudflare KV storage. A counter holds the number of requests only and expires after about a day. Legal basis: legitimate interest in service availability (LGPD Art. 7, IX).
Advertising
Araluma uses Google AdSense to display advertising. The ad spaces sit on tool pages. The home page and the legal pages carry no ads.
- Third-party vendors, Google among them, use cookies to serve ads based on your earlier visits to Araluma and to other websites.
- Google’s advertising cookies let Google and its partners serve ads to you based on your visits to this site and/or other sites on the internet.
- You can turn off personalized advertising in Google Ads Settings. Cookies from other ad vendors can be refused at www.aboutads.info, and visitors in the European Economic Area can also use www.youronlinechoices.eu.
- Visitors in the European Economic Area, the United Kingdom and Switzerland see a consent banner, provided through Google’s consent management platform, before any advertising cookie is set, and the same choice is offered wherever local law requires it (for example Brazil and California). Your choice is remembered and can be changed later from the privacy link the banner adds to the page.
- If you refuse, Google can still show non-personalized ads, chosen from the content of the page rather than from your browsing.
Google explains how it uses data from sites that show its ads at policies.google.com/technologies/partner-sites. Legal basis for advertising cookies: your consent (LGPD Art. 7, I, GDPR Art. 6(1)(a)).
Payments
Araluma processes no payments. Should a paid plan ever be offered, the payment provider will be named here before it goes live.
Service providers
| Provider | Role | Privacy policy |
|---|---|---|
| Cloudflare, Inc. | Hosting, DNS, security, Workers, R2 storage, KV counters, image segmentation and upscaling, Analytics Engine, optional Web Analytics | cloudflare.com/privacypolicy |
| Hostinger International Ltd. | Server in São Paulo, Brazil, that runs Compress, Convert and PDF jobs | hostinger.com/privacy-policy |
| ImageKit | Second route for Background Remover and Upscale | imagekit.io/privacy-policy |
| Functional Software, Inc. (Sentry) | Error monitoring | sentry.io/privacy |
| Google LLC | Advertising through Google AdSense, and the Google Drive picker | policies.google.com/privacy |
| Dropbox, Inc. | Dropbox Chooser and Saver | dropbox.com/privacy |
Transfers outside Brazil
Cloudflare runs a worldwide network, so your request may be handled in the data center nearest to you. ImageKit, Sentry, Google and Dropbox may process data in other countries, including the United States. These transfers rely on the mechanisms the law provides, namely standard contractual clauses offered by the providers and the need to perform the service you requested (LGPD Art. 33, GDPR Art. 46(2)(c)).
Your rights
Wherever you live, you can ask us what we hold about you and have it corrected or deleted. Brazilian law (LGPD Art. 18) spells out your rights in detail:
- Confirmation that processing takes place (item I)
- Access to your data (item II)
- Correction of incomplete, inaccurate or outdated data (item III)
- Anonymization, blocking or deletion of unnecessary or excessive data, or of data processed unlawfully (item IV)
- Portability to another provider, as regulated by the ANPD (item V)
- Deletion of data processed on the basis of consent (item VI)
- Information on the public and private entities we share data with (item VII)
- Information on the option of refusing consent and what refusing means (item VIII)
- Withdrawal of consent at any moment (item IX)
The GDPR and the CCPA/CPRA give similar rights, including objection and, in California, the right to know and to opt out of any sale or sharing. We do not sell or share personal information in the CCPA sense.
Write to support@araluma.com to use any of these rights. We try to answer within 5 business days, and the legal limit for small-scale agents (Resolução CD/ANPD nº 2/2022, Art. 14, I) is 30 days. Since we hold no accounts and keep no pictures, most requests end with a written confirmation that we have nothing linked to you.
You can also complain to Brazil’s data protection authority, the ANPD, or to the supervisory authority where you live in the European Union.
Children
Araluma is meant for a general audience and is not aimed at children (under 12 in the LGPD) or adolescents (12 to 17). We ask no one for identifying information and do not knowingly process children’s personal data. Processing a child’s data would require specific consent from a parent or guardian (LGPD Art. 14 §1). If you believe a child has sent us personal information, write to support@araluma.com and we will delete it.
Updates
When a new tool or provider changes how data flows, this page changes with it and the date below is updated. Significant changes will also be flagged on the home page.
Contact {#contact}
Privacy questions and requests: support@araluma.com. Everything else: support@araluma.com.
Last updated: 2026-09-28