Privacy & Deletion
Last updated：2025-06
How we handle your image
During a check, your image briefly exists in private storage and is sent to the detection provider for analysis. Our commitment: the original image is deleted immediately after a successful or failed check. If immediate deletion temporarily fails, a background job keeps retrying and records the outcome.
- Uploaded content is not used for model training.
- Without an account we set one anonymous session cookie (a random identifier only, valid for 30 days) to limit free checks. Data from anonymous checks is handled exactly like account data and the original image is deleted after the check.
- Images are held in private object storage accessible only to the detection pipeline.
- Results are decision-support signals, not factual determinations or legal evidence.
- After the original is deleted, the text report remains available during its retention period.
Retention periods
| Data category | Retention | Your control |
|---|---|---|
| Original image uploaded for the current service | Deleted immediately after success or failure; retried automatically if needed | View deletion status in your history |
| Historical videos and derived files | Handled under the rules in effect when the task was created | Delete manually from your history |
| Structured report data (text conclusions) | 30 days | Delete all data manually |
| Account, payments and quota ledger | As required by statutory financial periods | Request account deletion |
| Security and operations logs | Minimized, 30 days | Media content and sensitive raw-URL parameters are not logged |
Third-party detection provider
To perform image detection, we send image pixels to Sightengine and request AI-generation and face-manipulation signals. The request does not include your account identity. Sightengine handles data in its systems under its own terms and privacy policy.
Verifiable deletion
Every automatic or manual deletion writes an append-only audit event with the deletion time and associated task. The lifecycle is: check ends → immediate deletion attempt → background retry if needed . Deleting the original does not delete the text report while it remains within its retention period.
Contact us
Data-related requests (deletion, export, account closure) can be submitted through the in-site feedback channel.