Privacy Policy (summary)

Two retention rules

Private detection images: used only to produce your report, stored in a private bucket and auto-deleted after 24 hours. The database keeps only content hashes and verdicts — never the image. You can also hit "Delete now" at any time.

Voting-square images: when you actively choose to publish to the voting square, the image is copied to public storage and becomes viewable and votable by the community — such images are kept until you withdraw them, which you can do anytime from "My publications". Withdrawing immediately disables the voting page and share links.

Personal data inside metadata

Images may carry GPS location or photographer names in EXIF. Evidence display redacts them by default; the full metadata only expands after an explicit click.

Third-party processing

Classification and content-safety checks run via the Sightengine API — called only for step 7 or before publishing to the square. Images are sent over encrypted transport under their data-processing terms. C2PA parsing, watermark decoding, and EXIF/IPTC/PNG parsing all run inside our own detection container and never leave it.

Anonymous quota & fingerprinting

Rate limits for no-login checks are based on an irreversible hash of IP + browser characteristics, used only for same-day counting and never linked to identity.