img SVG Sprite Generator

LEGAL INFORMATION

Privacy Policy

Last updated: 13 October 2026

This policy describes data processing in connection with the SVG Sprite Generator: importing and previewing in the browser, temporary processing during server export, website delivery, optional analytics with Matomo and voluntary support through PayPal.

1. Controller and contact

You can also use this email address to exercise your data protection rights.

2. Image processing in your browser

When you select or drag in files, the generator reads their contents, filenames and image dimensions locally. It uses these to create previews, layer identifiers and HTML tags. Importing and previewing do not send image files to the server. No AI service is used to convert images.

New projects are not stored persistently. Images remain in the open page until you reload or close it. Existing local browser records are not automatically erased; you can remove them using your browser’s site-data settings.

Metadata may remain: Lossless optimization can remove some metadata, depending on the file format, but does not guarantee that all personal information is removed. Filenames become layer identifiers. Check the files and identifiers before publishing a result.

3. Clipboard and download

Import and preview take place in your browser. When you request a ZIP download, selected image contents, dimensions and identifiers are sent to our server over HTTPS for temporary processing. The generated ZIP is returned to your browser. The application processes image contents and ZIP data in memory and does not store them as permanent project files. Technical hosting buffers may exist; your browser and operating system manage downloaded files and the clipboard.

When you request the creation and transfer of a sprite package, your IP address is technically transmitted to our server. The export service does not store it in plain text. To protect against excessive requests, it stores an IP-derived verification value generated with a secret key, together with a request counter. This IP-derived value changes with each ten-minute time window. Entries from the current and previous windows may remain stored; older entries are removed during subsequent successful requests. If no further requests occur, expired entries may remain stored for longer. Releasing the ZIP package from memory does not simultaneously delete these separately stored IP-derived values; they are subject to the cleanup process described above. These rate-limiting entries contain no image content or filenames. The optional download counter itself does not store IP addresses. Separately, technical hosting logs may contain IP addresses; section 4 applies to these logs. Subsequently saving the received ZIP file locally on your device does not cause the generator to send an additional server request.

4. Hosting through ALL-INKL.COM

This website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The servers for this website are located in the ALL-INKL.COM data centres in Dresden (Germany). Requests transmit technically necessary connection data such as IP address, requested address, time, and browser and device information to the server.

The data is used to deliver, troubleshoot and protect the website. The legal basis is Article 6(1)(f) GDPR: the legitimate interest in operating the service securely. Information about processing by the hosting provider is available in the ALL-INKL.COM privacy information.

Retention of technical logs depends on the server configuration and necessary security and statutory retention purposes. For questions about the deletion periods applicable to this website, contact the controller named above.

5. Cookies, statistics and external content

You can separately allow “Remember theme” in the banner. Only with this consent is your light or dark mode stored as img-sprite-theme with an expiry date for 180 days and applied before the page appears on reload. Without consent, your choice applies only to the current visit; on the next visit, the theme starts in light mode. The legal basis for optional storage is Section 25(1) TDDDG and Article 6(1)(a) GDPR.

“Remember language” is a separate choice. With consent, the selected language is stored as img-sprite-preferences with an expiry date for 180 days. Without consent, a manual choice is not saved for later visits. Without a saved choice, the primary browser language is evaluated locally: German for a German language setting, otherwise English. The legal basis for optional storage is Section 25(1) TDDDG and Article 6(1)(a) GDPR. No image files are stored in these preferences.

In the banner, “Essential cookies” is always enabled and cannot be deselected. You can independently select the four optional purposes “Remember language”, “Remember theme”, “Sprite statistics”, and “Website analytics with Matomo”. Without a valid saved decision, no optional purpose is checked and all optional purposes remain off. “Save selection” allows only the purposes you have checked, “Accept all” allows all four. Both “Reject all” and “Reject” turn off all four optional purposes; essential cookies remain enabled. Closing the banner does not grant consent. The generator remains usable without consent. Earlier decisions remain valid for the purposes described at the time. A decision from before Matomo was introduced does not authorize Matomo. The banner asks for consent to new purposes while preserving previous choices. Your decision is stored as img-sprite-notice with the four purpose choices, timestamp, expiry and version number for 180 days. This local record is not sent to the operator. Storing it allows us to respect your choice without asking on every visit (Section 25(2)(2) TDDDG; Article 6(1)(f) GDPR).

Under “Privacy settings” in the footer, you can withdraw any consent at any time for the future by turning off the purpose and choosing “Save selection” or by using “Reject all” or “Reject”. Withdrawal removes the corresponding saved language and theme settings and stops future transmissions for the deselected statistics purposes. The lawfulness of processing before withdrawal remains unaffected. You can also reset the saved language and theme separately. You can also delete this website’s data in your browser. Expired entries are removed on your next visit. If your browser blocks local storage, the settings apply only to the current tab.

The generator uses the technically necessary session cookies described below for downloads. Google Analytics and our own advertising tracking scripts are not integrated. Optional, self-hosted Matomo analytics is described below. Fonts, browser logos and sample images are provided without embedded third-party font or image services. Technical server logs are covered by the information about hosting through ALL-INKL.COM.

External information pages are only accessed when you follow a corresponding link. The respective provider then receives the data necessary for that access. Its privacy notices apply.

Shared sprite counter

When you open the website, the shared total of requested sprite downloads is read from the server. Only if you have given consent and then download a sprite package, a count signal with a newly generated random event ID is sent. Image contents, file names and layer IDs are not transmitted. The event ID is not saved as a visitor identifier or reused for another download.

The counter stores the total and temporarily retains random event IDs with timestamps to prevent counting the same event twice. Entries remain valid for this check for up to 24 hours; expired IDs are removed during the next cleanup. The counter does not build user profiles or store IP addresses itself. Server requests nevertheless involve the technical connection data described under “Hosting”.

The total has no association with individuals and is retained indefinitely. It represents download requests, not a verified number of people or files actually saved. Optional count signals are transmitted based on your consent under Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG. Without consent, after rejection or after expiry, your downloads are not counted. Withdrawal stops future count signals; the existing aggregate total without an association with individuals remains.

Website analytics with Matomo

With your separate consent, we analyse page views and four generator steps to assess how the website is used and understood and to improve the service. For this purpose, the controller named above operates Matomo at matomo.ingozoell.de. Processing takes place on our hosting at ALL-INKL.COM in Dresden (Germany); the hosting provider named in Section 4 processes the data on our behalf. This integration does not transmit visitor data to Google Analytics or a Matomo cloud service.

The analytics script is loaded and a request is sent to the Matomo server only after you consent to “Website analytics with Matomo”. Without this consent, after rejection or after your decision expires, Matomo is not loaded and no analytics requests are triggered. Consent to the separate “Sprite statistics” purpose allows only the count signal described above, not Matomo analytics. The legal basis for website analytics is Article 6(1)(a) GDPR and, where information is accessed on your device, additionally Section 25(1) TDDDG.

We record the public page viewed with a sanitised path, the time, and browser and device information that accompanies the request. A referring external website, where available, is included only as its origin without a path or parameters. URL parameters, address fragments after # and full referring addresses with paths or parameters are not transmitted to analytics. Image contents, filenames, layer identifiers, form entries, payment contents are not part of the analysis. No user IDs are passed to Matomo. Only the events “example started”, “files selected”, “export started” and “ZIP handed to the browser” are recorded. The last event does not confirm that you saved the file. Actions before consent are not recorded retrospectively. Automatic tracking of other clicks and downloads, additional browser feature detection, campaigns, purchases and regular activity signals remain disabled. Heatmaps and session recordings are not used.

In this integration, Matomo sets no analytics cookies and stores no persistent visitor identifier on your device. The IP address technically required for transmission reaches the server but is partially masked before storage in the Matomo database. Matomo is set to mask two bytes: for IPv4 addresses, the last two number blocks are obscured, for example 192.168.xxx.xxx. IPv6 addresses are shortened according to the same Matomo masking level. Visit processing also uses the masked address. Matomo may derive a temporary identifier (config_id) from the remaining technical attributes to associate page views within a visit for a short period. This identifier is time-limited and renewed after no more than 24 hours. Cookie-free therefore does not mean that no identifiers or personal data are processed at all. Section 4 applies to separate technical hosting logs.

Automatic cleanup removes Matomo raw data once it is older than 30 days. Aggregated reports are removed after 12 months, except for basic metrics and monthly and yearly reports, which are retained without an automatic time limit. Deletion takes place in the next automatically triggered cleanup run after the applicable retention period is reached. These runs are triggered by website visits; cleanup may therefore be delayed when there are no visits. Withdrawal under “Privacy settings” stops future analytics requests. Turning analytics off does not by itself immediately delete previously collected data; the retention periods stated above and your data protection rights apply. For an access or deletion request, you can contact the controller named in Section 1.

6. Anonymous export

No account or sign-in is required. Export continues to use a technically necessary anonymous session for request validation and abuse prevention. Selected images are transmitted only when requesting an export and processed temporarily.

7. Optional contributions through PayPal

The optional support link opens PayPal only when you follow it. Use of the generator is free regardless of any contribution. PayPal processes the connection data and payment details you provide; payment and contact details may also be visible to the operator in the PayPal account. The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. Further information is available in the PayPal Privacy Statement.

8. Optional browser assistance

If your browser supports a connected assistant, the page offers functions for adding files, listing layers and downloading. The list may contain identifiers, dimensions and HTML tags. Whether and how your assistant service processes this information depends on its permissions and privacy terms. Normal use of the generator does not require this assistance.

9. Contact by email

If you write to me, I process your email address, the message contents and the information you provide to handle your enquiry. The legal basis is Article 6(1)(a) GDPR, or Article 6(1)(b) GDPR for an enquiry related to a contract. The information is needed only for as long as required to handle your enquiry, resolve any follow-up questions or meet statutory retention obligations.

10. Your rights

Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You may withdraw consent you have given with effect for the future. You may object to processing based on legitimate interests on grounds relating to your particular situation.

You may also lodge a complaint with a data protection supervisory authority, in particular where you live or work, or where a suspected infringement occurred. The State Commissioner for Data Protection and Freedom of Information is responsible for North Rhine-Westphalia. The German Data Protection Conference provides links to the competent supervisory authorities.

The generator does not make automated decisions about individuals that have legal or similarly significant effects. Image files stay in the browser when importing and previewing; when you download, they are processed on the server as described above. Technically necessary connection data is generated by page and API requests. Section 7 applies to voluntary support through PayPal.