Privacy Policy

Effective: September 2026. Dezoomify is a free, open-source tool for downloading high-resolution zoomable images. There are no accounts, no advertising, no analytics, and no tracking.

What runs where

• Website. Image URLs you enter are fetched directly by your browser. If a direct fetch does not complete quickly, public metadata files (never image tiles) are retried through a metadata proxy. The proxy never receives cookies, authorization headers, or credentials of any kind.
• Browser extension. Runs only when you explicitly invoke it on a tab, with per-site permissions you grant. See the section below for exactly how it handles cookies.
• Desktop app and CLI. Process images locally on your machine. Any credentials you provide stay in memory and are never written to disk or logs.

The browser extension and cookies

The extension only acts when you explicitly invoke it on a tab, and only for sites whose host permissions you have granted. It performs no background scanning and collects nothing while idle.

• Your session, not ours. When downloading image data, the extension fetches from the site you are viewing using your browser's existing session under the host permissions you granted. Your browser attaches that site's own cookies to those requests, exactly as it would when you open the files yourself; the extension does not read, copy, or transmit those cookie values.
• Cookies never leave your browser. The extension has no Dezoomify-side endpoint: it never sends cookies or image data to our servers, to the metadata proxy, or to any third party.
• Optional cookie permission. The cookies permission is optional and is only requested when you choose to hand a job off to the Dezoomify desktop app on your own machine. The consent dialog names the destination sites and which cookies are shared before anything happens. Declining keeps the job running in the extension without any cookie access.
• In memory only. Cookies shared with the desktop app travel over Chrome's native messaging to that app, are used to fetch the same site's images locally, and are held in memory only, never written to disk, logs, diagnostics, or crash reports.

What we store

Nothing about you. Jobs run in your browser or on your machine; source URLs, cookies, authorization headers, and image bytes never enter telemetry, crash reports, or document titles. Proxy access logs carry request IDs and coarse policy codes only, never target URLs or query strings. Diagnostics shown to you are redacted and copied only when you explicitly copy them.

What we share

Nothing. There is no data sale, no third-party analytics, and no data transfer, because there is no data collection.

Contact

Questions: open an issue at github.com/lovasoa/dezoomify.