Privacy
The short version: your image is analysed in memory and discarded. It is not stored, not indexed, and not used to train anything.
Lifecycle of a submitted image
- 01
Sent with metadata intact
Your file is uploaded byte-for-byte. It is not re-encoded or stripped before it leaves your device, because the EXIF block and the file's original compression structure are themselves part of what the detector examines. Only files above 3 MB are resized first, and only enough to keep the upload reasonable.
- 02
Held in memory only
The image is processed as a byte buffer for the duration of the request. It is never written to disk, never placed in a bucket, and never inserted into a database. There is no upload history to leak, because there is no store.
- 03
Sent to the classifier, if enabled
The one outbound hop is a request to a hosted image-classification model, which receives the image bytes and returns label probabilities. Nothing else about you is included. If that service is unreachable, the request falls back to local analysis rather than failing.
- 04
Discarded
When the response is written, the buffer goes out of scope. Nothing about the image persists on our side.
What we do collect
- Technical request data — Your IP address and a timestamp, kept transiently to enforce the per-hour rate limit. The counters are held in the server's memory and reset on restart; they are not persisted or analysed.
- Aggregate operational metrics — Request counts, response times, and error rates, used to keep the service working. These are counts, not contents, and are not linked to images.
- Anonymous product analytics — Page views and which pages are reached, in aggregate, to decide what to build next. No account exists, so nothing is tied to an identity.
What we do not do
- We do not store, retain, or archive submitted images.
- We do not use submitted images to train or fine-tune any model.
- We do not sell, share, or license submitted images or analysis results.
- We do not require an account, and there is no login to associate data with.
- We do not build a search index, gallery, or public feed from uploads.
Your control over a submitted file
Because nothing is retained, there is nothing to delete on request — the image is already gone by the time you read the result. If you are checking a sensitive document, note that the classifier hop does send the image bytes to a third-party inference provider; if that is not acceptable for your use case, run the detector with the classifier disabled, which keeps analysis entirely local to the forensics pass.