Privacy policy
In short: Content Credentials and metadata are read in your browser, an image that needs a model check passes through our server only for that check and is never written to disk, and we keep only a fingerprint of the file and the verdict. The details are below.
What we record
To understand which pages are useful, the site records anonymous usage events: a page being viewed, a tool being used, or a link to another website being clicked. Each event carries a random identifier created in your browser tab when you arrive. It is kept in session storage, disappears when you close the tab, and is not linked to your name, email address or device. We also record the address of the page, the website that referred you and any campaign tags in the link.
We also use Cloudflare Web Analytics to count page views and measure page load times. It does not use cookies, does not use local storage to identify you, and does not collect personal information; it only reports aggregate figures such as which pages were viewed and how quickly they loaded.
Image checks
When you check an image, your browser first reads its Content Credentials (C2PA) and metadata (EXIF) on your own device. If those settle the question, the image never leaves your browser.
Otherwise the image is sent to our server once, only for the check, and passed to a detection service (Sightengine, or Hive as a backup) that returns a score. We do not save the image itself. We keep a fingerprint of the file (a SHA-256 hash, which cannot be turned back into the image) together with the result, so the same image can be answered again without another upload.
Results you don't share are deleted after 30 days. If you choose to share a result, we keep the result page for 365 days, and a small thumbnail only if you tick that option. You can delete a shared result at any time from the page where you created it. Shared result pages are hidden from search engines unless you choose to make them public.
To count the 3 free checks per day and stop abuse, we use a Cloudflare Turnstile check and keyed hashes of your network address and of a random device ID stored in your browser. The address and device ID themselves are not stored.
Images you paste as a link are fetched by our server, handed back to your browser, and then checked the same way. If the website refuses our server, your browser asks that website for the image directly, without cookies. We do not keep them.
If you use "Report wrong result", we keep your answer, any note you write, the image fingerprint and the verdict it corrects for one year, to measure how often the checker is wrong. We do not keep the image or your network address; to count one report per person we store only a keyed hash.
What we never collect
We do not use cookies for tracking, we do not build profiles, and we do not store your IP address, browser fingerprint or any other personal information alongside these events. We do not sell or share data with advertisers.
Hosting
The site is served by Cloudflare. Like any web host, Cloudflare processes technical request data such as IP addresses to deliver pages and protect against abuse, under its own privacy policy.
Contact
Questions about this policy can be sent to hello@aiimagedetection.app.