Privacy Policy

Last updated: December 2025

Photo by Pawel Czerwinski
1

Privacy at a Glance

What is IMGFlow?

IMGFlow is a SaaS service that helps website operators automatically generate alt texts for images. The service consists of a WordPress plugin and our cloud platform.

Responsible Party

Stempel IT
Jonas Stempel
E-Mail: hello@imgflow.de

2

Data Collection on Our Website

Server Log Files

Automatically collected with each access:

IP addressDate & TimeRequested URLReferrerBrowser & OS
Legal Basis: Art. 6 Para. 1 lit. f GDPRRetention Period: 30 days

Cookies & Session Data

Technically Required

  • Session cookies (Login)
  • CSRF protection
  • Language settings

Analysis & Optimization

  • Usage statistics
  • A/B-Testing
  • Feature-Flags

User Behavior & Analytics

We analyze user behavior to improve our service:

Pages visitedTime on pageClick behaviorScroll depthConversionsDevice typeRegion

A/B Testing

We conduct A/B tests to test different versions of our website. You will be randomly assigned to a test group and may see a slightly modified version of the website.

Legal Basis: Art. 6 Para. 1 lit. f GDPR

Registration & User Account

At Registration

  • Email address
  • Password (encrypted)
  • Optional: Name

During Use

  • Connected websites
  • Usage statistics
  • Activity logs
3

Data Processing by IMGFlow

WordPress Plugin & Website Tracking

Image Data

  • Image URLs
  • Existing alt texts
  • Metadata (size, format)
  • Image context

Page Data

  • Page URLs
  • Page titles
  • Meta descriptions
  • Scan timestamps

Technical

  • WordPress-Version
  • Plugin-Version
  • Server info

AI Image Analysis & Alt Text Generation

For alt text generation, images are sent to AI services (e.g., OpenAI, Anthropic). Images are not permanently stored but only processed for analysis.

Tracking on Customer Websites

The plugin optionally collects:

Displayed imagesAlt text statusLoad timesError logs
Important: The plugin does not collect personal data from website visitors of our customers (no IP addresses, no cookies, no identifying information).
4

Data Sharing with Third Parties

KI

AI Services

OpenAI, Anthropic for alt text generation

Hosting

Servers in the EU

Payment

Payment service providers for transactions

5

Data Retention

Account Data

Until deletion + 30 days

Image Data

Until website deletion

Alt Texts

Until user deletion

Server Log Files

30 days

Analytics

26 months

Invoices

10 years (legal requirement)

6

Your Rights

Access

Art. 15 GDPR - Information about stored data

Rectification

Art. 16 GDPR - Correction of incorrect data

Erasure

Art. 17 GDPR - Deletion of your data

Restriction

Art. 18 GDPR - Restriction of processing

Data Portability

Art. 20 GDPR - Data in common format

Objection

Art. 21 GDPR - Object to processing

Withdrawal

Withdraw consent at any time

Complaint

Right to complain to supervisory authority

7

Data Security

SSL/TLS encryptionEncrypted storageRegular updatesAccess restrictionsRegular backupsFirewall & DDoS protection

Contact

For privacy questions or to exercise your rights, contact us at:

hello@imgflow.de

We will respond within one month.