1. Features that work without an account
Compression, compress to a target KB, resize, crop, text watermarks, format conversion, ICO generation, JPG to PDF, PDF to image and ZIP packaging all run inside your browser. Your images are not sent to our servers and we have no way to see them. A simple way to check: disconnect from the network and those pages still work.
2. What server-side features collect
Features that require model inference—AI cutout, ID photo background, old photo restoration, image upscaling and image-to-text—must upload the image to a server. In that case we record:
- the image file you uploaded;
- file size, pixel dimensions, format and original file name;
- the tool type and the settings you chose on the page (for example background colour or fine mode);
- your IP address and session identifier (used for quota accounting and abuse prevention);
- the result file.
3. How long we keep it
Task results are kept for 2 hours by default; VIP plans extend this (24 hours up to 7 days). Once a task expires, the uploaded original and the result file are removed by a cleanup job; the task record stays only for statistics and contains no image content. If you do not need a result, simply let it expire—no manual deletion is required.
One caveat: deletion depends on a scheduled cleanup job on the server. If that job does not run for a long time, files may live longer than the stated period. We never browse, copy or reuse your images.
4. Registration and sign-in
Registration needs only an email address or phone number, a password (stored as an irreversible hash—nobody, including us, can recover the plaintext) and a display name. After signing in we set a session cookie named tdd_sid to keep you logged in; session files live in a protected directory on the server and expire when the browser closes or the session goes idle.
Sign-in times and IP addresses are logged so that suspicious logins can be investigated. We do not use third-party analytics scripts and we do not run cross-site advertising trackers.
5. Orders and payments
Placing an order records the order number, plan, amount, payment method, status and timestamps. Payment is handled by a third-party payment platform (Epay); we never see or store card numbers, verification codes or payment passwords. We keep only the platform transaction ID, the amount actually paid and the callback time returned by the platform, so that orders can be reconciled and looked up.
Subscriptions are activated automatically by the platform's asynchronous notification. If a callback is lost and money was taken without activation, we verify the order number with the platform and credit the order manually. We will never ask you for a payment password or an SMS code to do so.
6. What we will not do
- Sell or rent your personal information;
- Use your images for model training, public display or case studies;
- Forward your images to third-party image services (AI inference runs on our own servers);
- Hand your data to any third party except where required by law or a lawful request from authorities.
7. Your rights
Access: after signing in, "My account" shows your profile, daily quota, recent tasks and orders.
Deletion: the same page offers self-service account deletion, confirmed with your current password. Deletion removes your task records and expired result files, clears your quota, and replaces your login identifier (phone or email) and display name with non-identifiable placeholders.
What remains after deletion: order records. They are the evidence required for refunds and reconciliation and must be kept for accounting purposes. This is also stated in the deletion dialog—we do not pretend everything disappears.
You may also email hi@tdd8.cn to request access, correction or deletion, quoting the phone number or email you registered with. We will respond within 15 business days.
8. Minors
Users under 14 should only use this site with a guardian present who agrees to this policy. If we learn that a child's personal information was collected without guardian consent, we will delete it as soon as possible.
9. Security measures
Passwords are hashed, the whole site runs over HTTPS, the database and upload directory are inaccessible from the web, and the admin area requires an administrator account and origin checks. API keys are stored only as hashes, with the plaintext shown once at creation. Even so, no system can guarantee absolute security—please do not upload images that contain ID numbers, card numbers or other sensitive information.
10. Changes to this policy
Any change to this policy is published on this page. Changes that materially affect your rights are announced prominently on the site. Continuing to use the service means you accept the updated policy.