Privacy Policy

JPGBoost is designed to process your images entirely locally, on your Mac. This policy explains what data is processed, under what circumstances, and by which services.

1. Image processing

JPGBoost decodes, compresses, and exports your images entirely on your Mac.

No image and no thumbnail generated for previews is ever sent to a server. This also applies to using the local API, the CLI, Shortcuts/AppleScript, and watched folders, which are different ways of driving the same local compression engine.

The image files you process with JPGBoost are therefore not transmitted to JPGBoost or to any remote server as part of the app's normal operation.

When exporting, JPGBoost strips the EXIF metadata from the original image, including information that may contain GPS location, capture date, or camera model. Only the orientation information needed to display the image correctly is kept.

2. Local API

The Pro local API feature exposes an HTTP server only on the loopback interface 127.0.0.1 of your Mac.

This server is only accessible from the same machine. It is not accessible from the local network or from the internet.

This feature is disabled by default.

3. Pro license

Activating a Pro license using the token received by email, as well as adding an installation to an existing license using a pairing code, requires communication with our license server.

During these operations, which are explicitly triggered by you, our server receives:

  • the machine identifier of the installation (IOPlatformUUID);
  • the email address associated with the purchase.

The machine identifier is specific to the app or the CLI, including when they are used on a Mac already covered by another installation.

Outside of these activation or installation management operations, no license check is ever sent to the server. Every launch of JPGBoost validates the license entirely locally, using its Ed25519 cryptographic signature, with no network connection and no JPGBoost account creation.

The signed license stored on your Mac contains your email address, shown for reference in Settings, along with the machine identifiers of your authorized installations.

This information is processed to enable the activation and management of your license and is not shared with any third parties other than the technical providers required to operate the licensing service.

Managing installations

A Pro license allows up to two authorized installations.

The JPGBoost app and the CLI each count as one installation, even when used on the same Mac.

Adding or removing an installation can be done directly from Settings → License, using a pairing code generated from an already activated installation. No request to JPGBoost is needed to manage these installations.

There is no JPGBoost user account. As a result, if you simultaneously lose access to all your authorized installations, we have no account to automatically restore your license. We therefore recommend keeping your purchase email and your license token safe.

4. Updates

The update check is disabled by default and can be turned on at any time from JPGBoost's Settings.

When enabled, JPGBoost only compares the installed version number with the latest one available, using a static version file hosted online.

No information about your Mac, your files, or your use of JPGBoost is collected or transmitted during this check.

JPGBoost uses no telemetry mechanism.

No download or installation is ever performed automatically. When a new version is available, JPGBoost simply lets you know one exists and offers a link to the download page, which you open manually in your browser.

5. Purchasing a license

Purchasing a Pro license is carried out via Stripe, our payment provider.

During payment, Stripe collects and processes the information needed to complete the transaction, which may include your email address, your payment information, your billing information, and the information needed for fraud prevention and compliance with applicable legal obligations.

Payment data is processed by Stripe in accordance with its own privacy policy and applicable terms.

JPGBoost receives from Stripe the information needed to process your order and manage your license, including your email address and the information needed to identify the transaction.

This information may be used to:

  • confirm your purchase;
  • generate and send you your activation token;
  • link your license to the email address used at purchase;
  • provide management and support for your license;
  • meet our legal and accounting obligations.

JPGBoost does not receive or store your full card details. Payment information is processed directly by Stripe.

For more information on how Stripe processes personal data, you can review its privacy policy.

6. Website

JPGBoost's website sets no cookies for analytics, advertising, or behavioral tracking, and uses no analytics or tracking tool such as Google Analytics or an equivalent service.

JPGBoost implements no telemetry mechanism to track your use of the website or the app.

The website is hosted and/or protected by infrastructure services that may process certain technical data needed for its operation and security, including information related to requests, connections, browser, or IP address.

This technical processing may in particular be carried out by Cloudflare, depending on the services used by the website.

JPGBoost does not use this data for profiling, advertising, or behavioral measurement of its users.

7. Personal data and legal bases

Where the General Data Protection Regulation (GDPR) applies, the processing of personal data described in this policy relies on an appropriate legal basis, including:

  • performance of a contract or pre-contractual measures for processing an order and managing a license;
  • JPGBoost's legitimate interest in ensuring the operation, security, and maintenance of its services;
  • compliance with legal obligations where applicable.

JPGBoost does not sell your personal data and does not use it for behavioral advertising.

8. International transfers

As JPGBoost is a company established in France and uses certain international technology providers, some data may be processed or transferred outside the European Economic Area (EEA).

Where the GDPR applies and a transfer of personal data outside the EEA occurs, it is carried out in accordance with the mechanisms provided for by applicable regulations, such as an adequacy decision or appropriate safeguards where required.

The providers concerned may apply their own terms and privacy policies.

9. Data retention

JPGBoost does not retain on its servers the images you process with the app.

Data related to license activation and management may be retained for as long as necessary to provide and administer the licensing service, subject to applicable legal obligations.

Purchase related data may also be retained by our payment providers in accordance with their contractual, legal, and regulatory obligations.

10. Your rights

Where the GDPR applies, you have, under the conditions set out by the regulation, rights regarding your personal data, including:

  • a right of access;
  • a right to rectification;
  • a right to erasure;
  • a right to restriction of processing;
  • a right to object;
  • a right to data portability where applicable.

The exercise of these rights may be limited where the retention or processing of data is necessary to comply with a legal obligation or for the establishment, exercise, or defense of legal claims.

For data processed directly by our providers, in particular payment data, some requests may need to be sent directly to the provider concerned.

You may also contact us so that we can tell you, where applicable, which provider is responsible for the relevant processing.

Finally, you have the right to lodge a complaint with the competent supervisory authority. For a company established in France, the competent supervisory authority is in particular the Commission nationale de l'informatique et des libertés (CNIL).

11. Contact

For any question about this privacy policy or the processing of your personal data, you can contact us via the contact form.

12. Changes to this policy

This privacy policy may be updated to reflect changes to JPGBoost, its services, its technical infrastructure, or applicable regulations.

The most recent version of the policy is published on this page.

Last updated: July 2026.