Privacy Policy

Last updated: October 9, 2026

1. Who is responsible

crisp.photos is run by G3ronimo Labs e.U., Zedlitzgasse 5/13, 1010 Vienna, Austria. For anything about your data, write to [email protected].

2. The free tools

The photo upscaler, anime upscaler, DPI calculator and before/after video generator run entirely in your browser. Your images are processed on your own device and are never uploaded to us or anyone else.

3. Visiting the website

Hosting and network

The website and our server run at Hetzner Online GmbH, in their data center in Helsinki, Finland (EU), and delivered through Cloudflare, which protects it against attacks and speeds it up. To deliver pages, these providers necessarily process your IP address and basic request data (time, requested address, browser type).

Server logs

Our server keeps a technical log of requests (IP address, time, requested address, status) and of account events such as payments and login emails, which include the email address involved. We use these logs to keep the service running, find errors and prevent abuse. They are deleted after 14 days.

Legal basis: our legitimate interest in a secure, working service (Art. 6(1)(f) GDPR).

Visitor statistics

We count visits with Plausible Analytics, which we run ourselves on our server in Helsinki, so the data never goes to a third party. Plausible sets no cookies and stores no personal data: it counts page views, referring sites, country, device type and a few button clicks, in aggregate. If the page hits a technical error, the error message is counted the same way, without anything that identifies you.

Legal basis: our legitimate interest in understanding how the site is used (Art. 6(1)(f) GDPR).

Stored in your browser

We don't set cookies. The site stores a few things in your browser:

• your light/dark theme choice (local storage), until you clear it;
• while you buy more fast-mode credits, your login key for the trip to Stripe and back (session storage, gone when you close the tab).

Stripe's checkout page sets its own cookies, which are needed for the payment and to prevent fraud.

4. Mailing list

If you sign up for our newsletter, we store your email address with Kit (Kit Inc., USA) to send you news about crisp.photos. You can unsubscribe with the link in every email, and we then stop using your address.

Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

5. Fast mode

Buying credits

Payments are handled by Stripe (Stripe Payments Europe Ltd., Ireland). Your card or payment details go to Stripe, never to us. We receive your email address, the pack you bought, the amount and a payment reference. See Stripe's privacy policy.

Legal basis: carrying out our contract with you (Art. 6(1)(b) GDPR). We keep payment records for as long as tax law requires (in Austria, seven years; Art. 6(1)(c) GDPR).

Your account

Your fast-mode account consists of your email address, your credit history (purchases, photos processed, refunds) and a login key. Your login link contains that key; we only store a fingerprint (hash) of it, so not even we can read it back. We email you the link through Purelymail.

We keep your account while you use it. Write to us and we delete it, except for the payment records we have to keep for tax purposes.

Your photos

• Upload and storage: your browser uploads each photo directly to Amazon Web Services (Amazon Web Services EMEA SARL) in Stockholm, Sweden. Results are stored there too, encrypted at rest.
• Processing: our own GPU server in Austria downloads the photo, upscales it and uploads the result. Nobody looks at your photos.
• Deletion: your original photo is deleted as soon as its result is ready. Results, and photos that were never processed or failed, are deleted automatically within 48 hours. Download your results before then.
• File name: we keep a simplified version of your photo's file name (letters and digits only) so your download gets a matching name. It is deleted together with the result.
• Job records: for each photo we keep when it was processed and whether it succeeded, without the image or its name. That's part of your credit history.
• No training: we never use your photos or results to train or improve models.

Please only upload photos you're allowed to use. If a photo shows other people, you're responsible for having a reason to process it.

Legal basis: carrying out our contract with you (Art. 6(1)(b) GDPR).

6. Who receives data

We only share data with the service providers needed to run crisp.photos, each bound by a data processing agreement:

Some of these companies are based in the USA. Transfers there rely on the EU-U.S. Data Privacy Framework or on the EU's Standard Contractual Clauses.

We never sell your data, and we don't use it for advertising or profiling.

7. Your rights

Under the GDPR you can ask us to:

• tell you what data we have about you, and give you a copy;
• correct or delete it;
• restrict how we use it, or object to it;
• hand it to you in a machine-readable format.

Where we rely on your consent, you can withdraw it at any time. Just email us. You can also complain to a data protection authority. In Austria that's the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

8. Changes

If we change how we handle data, we update this page and the date at the top. For changes that matter to fast-mode customers, we also tell you by email.