Policy overview
See the actual consent cookie and optional local settings, their purposes and retention. Learn about regional measurement modes and how to withdraw consent.
What cookies and local storage do here
This inventory describes technologies actually implemented in this release, rather than a standard list from unrelated SDKs. Image processing needs no optional cookie. The editor keeps files, previews and outputs in the active browser session, not cookies, local storage or IndexedDB. The public sample and self-hosted code still require network delivery. The table below is generated from the same storage registry used by Cookie Settings.
Separate purposes and genuine controls
Necessary consent storage is always available for remembering an explicit decision; it does not authorize optional processing. Remember language and Remember tool settings are separate opt-in purposes. Without either, you can still change language, resize, crop, adjust quality, set target KB and download results. Refusal removes known saved preferences without resetting the current work. The panel lists inactive technologies as not used, with no decorative active toggle.
Limited measurement and analytics cookies are separate when an actual verified analytics provider is configured. Cookies require measurement to be enabled, but selecting measurement does not silently enable cookies. No optional diagnostics, advertising storage, advertising data use, personalized ads or external media is installed here. Adding any such handler requires an updated disclosure and the applicable new choice; Agree cannot override an applicable GPC restriction.
Before choice, acceptance and refusal
Unknown regional applicability defaults to the strict, consent-required profile. The language of a URL is not a legal-region signal. Only reviewed trusted infrastructure can select GA4 Advanced or aggregate-only behavior. Advanced mode is a technical measurement configuration, not consent or a universal exemption. Without that verified applicability, no third-party pre-choice pings run. Aggregate-only means no additional client measurement; any permitted totals must come from already necessary hosting operations.
Agree covers only the active disclosed purposes. Opening options, closing them with Escape, continuing to edit or following a policy link is not consent. Reject optional and turning measurement off stop future optional analytics calls, including cookieless pings. They do not promise to erase information a provider has already received. Necessary delivery/security handling remains separate and is not used to reconstruct a marketing profile.
Current cookie and storage inventory
The necessary choice cookie is host-only, Path=/ and SameSite=Lax, with Secure on HTTPS. Acceptance and refusal last 180 days, a project setting rather than a universal legal retention period. Preference expiry is checked on access because local storage has no native expiry; you can also remove it in browser controls. There is no shared consent domain or shared visitor ID across separate sites.
| Provider | Cookie / storage / SDK | Purpose and category | Retention | Activation and control |
|---|---|---|---|---|
| Resize Images Online First party, this host only | rio_consentCookie | Decision, purpose flags, policy version and dates; no visitor ID. Necessary | 180 days for acceptance and refusal | After an explicit choice; host-only, SameSite=Lax, Secure on HTTPS. Change or reject optional purposes in Cookie Settings. Blocking cookies keeps the choice in this page only. |
| Resize Images Online First party, this host only | rio_language_v1Local storage | Language code and expiry; no image data. Remember language | 180 days, checked on access | Only with this preference enabled. Turn off Remember language; this key is removed. |
| Resize Images Online First party, this host only | rio_tool_settings_v1Local storage | Validated defaults by tool; no crop coordinates, files or results. Remember tool settings | 180 days, checked on access | Only with this preference enabled. Turn off Remember tool settings; current work is preserved. |
Change your choice and browser controls
Use Cookie Settings in the footer to inspect current purposes and vendors, save individual preferences, agree to active purposes or reject all optional ones. Choices synchronize across tabs of this host. Withdrawal removes only known optional preference keys and any known accessible analytics cookies for a configured provider; it never calls a blanket storage clear or deletes unrelated sessions. Third-party cookies that cannot be removed directly require that provider’s controls, and future use must stop.
If storage is blocked, your explicit decision is applied in the current page and a warning explains that it may not survive reload. A slow or failed external CMP keeps optional integrations off and does not remove files or results. Browser privacy extensions may block optional scripts; the image editor remains usable. The consent record is a minimal choice record, not an analytics identifier, and no hidden image session is sent with it.
Providers, policy updates and contact
The vendor panel identifies the site’s preference storage and any verified active analytics provider. It does not fabricate TCF vendors or a certified CMP installation. Advertising remains unavailable until an actual approved provider, applicable certified CMP and provider controls are verified. Production hosting identity, regions and operational log retention still require owner configuration. The prelaunch notice applies to this document too.