Privacy Policy

1. Introduction

COMBb2 ("Service"), operated by bee2.io LLC ("Company," "we," "us," or "our"), is a browser-based image processing suite offering free and paid plans. This Privacy Policy explains how we handle your information when you use our Service at combb2.io.

The core principle is simple: your images never leave your device. All image processing — upscaling, deblurring, denoising, enhancing, retouching, background removal, compression, and conversion — happens entirely in your browser using client-side JavaScript, WebAssembly, and AI models. No images are uploaded to any server.

2. Information We Do Not Collect

We do not collect, store, transmit, or have access to:

• Your images, photos, screenshots, or any visual content you process
• The content or metadata of your files
• Location data
• Device identifiers or fingerprints

We have no ability to view, access, or recover any image you process. Once you close or refresh the page, processed images exist only on your device.

3. Information We Collect

When you create an account or subscribe to a paid plan, we collect the following:

Account Information

When you create an account, we collect your email address and optionally your name. If you sign in via Google, we receive your Google email and profile name.

Subscription and Billing

If you subscribe to Pro, payment processing is handled entirely by Paddle.com (our Merchant of Record). We do not receive or store your credit card, bank account, or payment details. Paddle provides us with: your Paddle customer ID, subscription ID, and subscription status (active/cancelled).

Usage Data

We track the number of saves/downloads per day for quota enforcement. This count is stored in your user profile.

Authentication Tokens

When you sign in via email, we generate a one-time code (OTP). The hashed code is stored temporarily and deleted after use or expiration.

4. Information That May Be Collected Automatically

When you visit combb2.io, the following may be collected automatically by our hosting infrastructure:

Server and CDN Logs

Our hosting and CDN provider may collect standard web server logs, including:

• IP address (anonymized and not stored long-term)
• Browser type and version (User-Agent)
• Pages visited and timestamps
• Referring URL

These logs are managed by our hosting provider under their own privacy policy and are used for security, abuse prevention, and performance optimization. We do not use these logs for tracking or advertising.

5. Local Storage and Cookies

COMBb2 uses browser localStorage for the following purposes:

• Theme preference (combb2-theme): Stores your light/dark mode choice
• Auth session data: Authentication tokens used to keep you signed in
• Download quota cache: Your daily save/download count for quota enforcement

We do not use advertising cookies. We use Google Analytics 4 to understand which pages are visited and how features are used. GA4 may set first-party cookies (e.g., _ga) to distinguish unique visitors. No personally identifiable information is sent to Google Analytics — we do not track your name, email, or image content.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

6. Third-Party Services

COMBb2 uses the following third-party services:

CDN and AI Model Hosting

AI model files and WebAssembly runtimes are served from third-party content delivery networks. These CDN providers may log access requests (including your IP address) according to their own privacy policies. We do not control or have access to their logs. Model files are cached by your browser after the first download.

Authentication and Database

We use a third-party authentication and database service to manage your account, store your profile data, and track usage quotas. This provider stores your email, name, and subscription status.

Payment Processing

Pro subscriptions are processed by Paddle.com, our Merchant of Record. Paddle handles all billing, invoicing, and tax on our behalf. We do not receive or store your payment details.

Social Sign-In

If you sign in using a third-party social login provider, that provider shares your email address and profile name with us. Your use of the provider is subject to their own privacy policy.

Analytics

We use Google Analytics 4 to collect anonymous usage data such as pages visited, features used, and general interaction patterns. This helps us improve the Service. Google Analytics may set cookies and collect your IP address (which Google anonymizes). No image data or personally identifiable information is sent to Google Analytics. See Google's Privacy Policy for details.

7. How Your Images Are Processed

When you use any COMBb2 tool:

1. You select or drop an image file in your browser
2. The image is read into browser memory (RAM) only
3. AI models and processing algorithms run entirely in your browser using JavaScript, WebAssembly, and Web Workers
4. The processed result is generated in browser memory
5. You download the result to your device

At no point during this process is your image transmitted over the network. The image data stays within your browser's sandboxed environment. We cannot see, intercept, or access your images.

8. Children's Privacy

COMBb2 requires an account to save processed images and collects email addresses for account creation. The Service is not directed at children under 13.

We do not knowingly collect information from children under 13. If we learn that a child under 13 has created an account, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us at [email protected].

9. Data Security

Our security approach is built on minimizing data exposure:

• Images never leave your device: Your images are processed entirely in the browser and are never uploaded to any server
• Minimal data collection: We only store account information (email, name) and usage counts — no images, files, or payment details
• HTTPS only: All connections to combb2.io are encrypted via TLS
• Security headers: We implement Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Strict-Transport-Security, and other security headers
• No advertising trackers: We use privacy-respecting analytics (Google Analytics 4) only to understand usage patterns — no advertising scripts or data brokers

10. Your Rights

If you have an account, you may:

• Request access to your personal data (email, profile)
• Request deletion of your account and associated data by contacting [email protected]
• Export your data upon request

For EU/EEA users: you have additional rights under GDPR including the right to object to processing and data portability.

You can clear your locally stored data (theme preference, auth session, quota cache) at any time by clearing your browser's localStorage for combb2.io.

11. International Users

COMBb2 is operated from the United States. All image processing occurs in your browser, so there are no cross-border data transfers of your content. Account data (email, profile, usage counts) is stored in cloud infrastructure that may be located outside your country. Static website assets are served via a global CDN, which may route requests through servers in various countries for performance purposes.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

13. Contact

Questions about this Privacy Policy? Contact us:

• Email: [email protected]