In short
Combinor sets no cookies, uses no analytics and no advertising, and has no user accounts. Your images are combined in the server memory and sent straight back to you; they are never written to disk and never kept. The only personal data the service handles is your IP address, held in memory for a few minutes to keep the queue fair and to limit abuse.
Who is responsible
The controller for this processing is INSOGAMES SRL, Chaussée de la Seigneurie 129, 4800 Verviers, Belgium, enterprise number 0777.536.261.
For any question about your data, or to exercise the rights described below, write to combinor@sjns.be. No data protection officer has been appointed, which the scale of this processing does not require.
The images you submit
An image can contain personal data — a face, a document, location coordinates recorded by a phone. This is what happens to it:
- Purpose: combining your images into one and compressing the result, which is the service you asked for.
- Legal basis: your request, under Article 6(1)(b) of the GDPR — the processing is what you came for and cannot be done without it.
- Retention: the duration of your request only. The files exist in the server memory while being processed and are released as soon as the result is sent. Nothing is written to disk, so there is no copy to delete afterwards and none can be recovered.
- Metadata: the result is re-encoded from raw pixels, so the metadata of your source files — including any GPS coordinates — is not carried into the combined image.
- Recipients: none. The images are not sent to any third party, are not used to train anything, and are not looked at.
Your IP address
- Purpose: limiting the number of requests per address and holding your place in the queue, so that one visitor cannot monopolise the service.
- Legal basis: our legitimate interest in keeping the service available and protecting it from abuse, under Article 6(1)(f) of the GDPR.
- Retention: in memory only, for at most fifteen minutes, and never written to a database or a log file by the application.
Cookies and tracking
The site sets no cookie of any kind, neither its own nor a third party's. It embeds no analytics script, no advertising tag, no social network button and no external font. Nothing follows you from one page to the next, which is why you are not asked for any consent.
Should this ever change — for instance if an audience measurement tool or advertising were added — this page would be updated beforehand and, where the law requires it, your consent would be requested before anything is placed on your device.
Subcontractors and transfers
The site is hosted by OVH SAS (2 rue Kellermann, 59100 Roubaix, France), acting as a processor on our instructions, on servers in its Strasbourg (SBG) datacentre in France.
No personal data is transferred outside the European Union.
Your rights
Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable form. Write to combinor@sjns.be to exercise them.
You should know that, in practice, we hold almost nothing that these rights can be applied to: your images no longer exist once your request has finished, and your IP address disappears from memory within minutes. Without an account, there is no file on you to consult or delete.
If you believe your rights have not been respected, you may lodge a complaint with the Belgian supervisory authority: Autorité de protection des données, Rue de la Presse 35, 1000 Brussels, autoriteprotectiondonnees.be.
Automated decisions
The service takes no automated decision producing legal effects concerning you, and carries out no profiling.
Changes to this policy
This policy describes the service as it works today. Any change to what is processed will be reflected here, and the date shown at the top of the page updated accordingly.