Privacy Policy

We collect minimal data, process it in the EU, and delete files automatically.

Last updated: December 2025

Who We Are

Compress.FAST is operated by Tools Fast Group (ABN 95 273 980 219), an Australian business. Compress.FAST is part of the Tools.FAST network of productivity tools.

What We Collect

Files You Upload

Files are uploaded to our EU servers for compression. We store only the file extension (not filenames) and delete all files automatically after 1 hour—or immediately when you click delete.

Job Metadata

For billing and fraud prevention, we retain: job identifiers, compression type, file sizes, processing time, and credits consumed. We do not retain filenames, file contents, or extracted metadata (like image EXIF data).

Account Data

If you create an account: email address, name, and authentication provider (e.g., Google). We use this to identify your account and send transactional emails.

Usage Data

Anonymous usage patterns: pages visited, compression types used, and aggregate statistics. We use self-hosted Plausible Analytics—a privacy-first platform with no tracking cookies, no personal data collection, and no cross-site tracking.

IP Addresses

We use hashed IP addresses for rate limiting and abuse prevention. We do not store raw IP addresses in logs.

Cookies

We use only essential cookies:

  • Session cookie — Maintains your login state (if signed in)
  • Anonymous session — Tracks usage limits for guests (hashed identifier, no personal data)

We do not use advertising cookies, tracking pixels, or third-party analytics that track individuals.

How We Use Your Data

  • Process file compression you request
  • Calculate and debit credits from your account
  • Enforce rate limits and prevent abuse
  • Send transactional emails (account verification, password resets) and occasional product updates
  • Improve the service through aggregate analytics

Third Parties

We do not sell your data. We share minimal data with:

  • Stripe — Payment processing
  • Google OAuth — Authentication (if you choose to sign in with Google)

File processing happens entirely on our infrastructure. We never send your files to third-party APIs.

Data Location

All file processing and storage occurs on servers physically located in the European Union. Your files stream encrypted (TLS 1.3) straight from your browser to our EU infrastructure.

Data Retention

  • Uploaded files: Deleted 1 hour after compression (all tiers)
  • Job metadata: Retained for billing records and fraud prevention
  • Account data: Retained until you delete your account

Your Rights (GDPR)

Under GDPR, you have the right to:

  • Access — Request a copy of your data
  • Rectification — Correct inaccurate data
  • Erasure — Delete your account and associated data
  • Portability — Export your job history
  • Object — Object to processing for direct marketing (you can unsubscribe from product updates anytime)
  • Restriction — Request we limit processing

To exercise any of these rights, email privacy@compress.fast. We respond within 30 days.

Security

See our Security page for details on encryption, data handling, and infrastructure security.

Children's Privacy

Compress.FAST is not intended for children under 16. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy occasionally. Significant changes will be announced via email to registered users.

Contact