Privacy Policy

The short version

• Photos never leave your browser. JPG, PNG and WebP files are inspected and cleaned locally on your device. You can verify this: open your browser's DevTools Network panel while cleaning a photo — there are no file uploads.
• Other formats are processed, then gone. PDF, video and audio files can't be safely rewritten in a browser, so they travel to our cleaning server over an encrypted HTTPS connection, are processed in a temporary workspace, streamed back to you, and deleted immediately. They are never written to durable storage, never backed up, never used for anything else, and never seen by a person.
• We never store your files, and we never read their contents. Not for photos, not for server-processed formats, not for paid plans.

1. Files you clean

Images (JPG, PNG, WebP): processed entirely inside your browser tab by JavaScript served with this page. The file's bytes are never transmitted to us. Closing the tab removes everything.

PDF, video and audio: transmitted over HTTPS to our processing server, held in a temporary per-request workspace only for the seconds the cleaning takes, returned to you, and deleted in the same request — including when processing fails. Our processing logs record a random request id, the file format, byte sizes, and timing. They never record file names, file contents, or metadata values.

2. Analytics

We use PostHog with autocapture, session replay and automatic pageview collection all disabled. The site emits six explicit events (file loaded, metadata viewed, clean downloaded, parse failed, upgrade hook clicked, checkout started). Event properties are limited to format strings, bucketed file sizes, and booleans — never file names, file contents, or metadata values.

3. Accounts and payments

The free tier requires no account. If you sign up for a paid plan we store your email address, name (optional), password hash, plan status and a credit ledger. Payments are processed by PayPal; we receive transaction identifiers and amounts, never your card or bank details. Purchase receipts are sent by email.

4. Abuse prevention

To keep the free tier available, our processing server applies short-lived, per-IP rate limits. IP addresses used for rate limiting are held in memory only and are not tied to your files or account.

5. Service providers

We rely on: hosting for this website, our own processing server for the server-cleaned formats, PayPal (payments), PostHog (the limited analytics described above), and Resend (transactional email for accounts). Each receives only what its function requires. We do not sell or share personal data for advertising.

6. Retention and deletion

• Cleaned and uploaded files: not retained (see section 1).
• Account data: kept while your account exists; deleted on request.
• Payment and ledger records: kept as required for accounting and fraud prevention.

To delete your account or exercise any data right, email us and we'll action it promptly.

7. Contact

Questions about this policy or your data: use the contact page on this site.