Privacy Policy

The short version

• Photos never leave your browser. JPG, PNG and WebP files are inspected and cleaned locally on your device. You can verify this: open your browser's DevTools Network panel while cleaning a photo — there are no file uploads.
• Other formats are processed, then gone. PDF, video and audio files can't be safely rewritten in a browser, so they travel to our cleaning server over an encrypted HTTPS connection, are processed in a temporary workspace, streamed back to you, and deleted immediately. They are never written to durable storage, never backed up, never used for anything else, and never seen by a person.
• We never store your files, and we never read their contents. Not for photos, not for server-processed formats, not for paid plans.

1. Files you clean

Images (JPG, PNG, WebP): processed entirely inside your browser tab by JavaScript served with this page. The file's bytes are never transmitted to us. Closing the tab removes everything.

PDF, video and audio: transmitted over HTTPS to our processing server, held in a temporary per-request workspace only for the seconds the cleaning takes, returned to you, and deleted in the same request — including when processing fails. Our processing logs record a random request id, the file format, byte sizes, and timing. They never record file names, file contents, or metadata values.

2. Analytics

We use PostHog with autocapture and automatic pageview collection disabled. The site emits seven explicit events (file loaded, metadata viewed, clean downloaded, parse failed, upgrade hook shown, upgrade hook clicked, checkout started). Event properties are limited to format strings, bucketed file sizes, and booleans — never file names, file contents, or metadata values.

We may record anonymised session replays to find usability problems. Everything file-related is excluded at the source: your files, thumbnails, file names and any metadata shown on screen are replaced by a blank placeholder in your browser before anything is sent, and everything you type into any form is masked. Generic interface elements that never contain file data — such as upgrade prompts and pricing links — can appear in replays. A replay can show that someone dragged a file in, hit the free limit and clicked a pricing link — never what the file was or what it contained.

We also use Google Analytics for aggregate traffic measurement — visit counts, traffic sources and page performance. Like everything else on this site, it never receives file names, file contents, or metadata values.

3. Accounts and payments

The free tier requires no account. If you sign up for a paid plan we store your email address, name (optional), password hash, plan status and a credit ledger. Payments are processed by PayPal; we receive transaction identifiers and amounts, never your card or bank details. Purchase receipts are sent by email.

4. Abuse prevention

To keep the free tier available, our processing server applies short-lived, per-IP rate limits. IP addresses used for rate limiting are held in memory only and are not tied to your files or account.

5. Service providers

We rely on: hosting for this website, our own processing server for the server-cleaned formats, PayPal (payments), PostHog and Google Analytics (the limited analytics described above), and Resend (transactional email for accounts). Each receives only what its function requires. We do not sell personal data, and we do not share it to build advertising profiles. When we advertise our own service, we may report campaign-level conversion events to the ad platform to measure that campaign — never your files, their metadata, or your identity.

6. Retention and deletion

• Cleaned and uploaded files: not retained (see section 1).
• Account data: kept while your account exists; deleted on request.
• Payment and ledger records: kept as required for accounting and fraud prevention.

To delete your account or exercise any data right, email us and we'll action it promptly.

7. Contact

Questions about this policy or your data: use the contact page on this site.