The images you check
- On your device: Content Credentials (C2PA) and metadata are read in your browser. The image does not leave your device for this step.
- Pattern model: unless the file already carries signed AI credentials, a resized copy (long edge up to 2048 px, re-encoded as JPEG) is sent to our server and passed to our detection provider, Sightengine, for analysis. We do not store the image. Sightengine processes it under its own privacy policy.
- PDF reports are generated in your browser. We never receive them.
Usage limits
To enforce the free daily limit we store a counter keyed by a one-way hash of your IP address (never the raw address) in Upstash Redis. Counters expire after two days.
Payments
Subscriptions are processed by Stripe. When Stripe Managed Payments is enabled, the order is sold through Link, Stripe's merchant-of-record service, which handles sales tax and VAT. We receive your email address and subscription status; we never see your card number. Your Pro key contains your subscription id, customer id and email so it can be checked without an account database.
Analytics
This site uses Google Analytics 4 and Microsoft Clarity to understand which pages and features are used. They set cookies and collect usage data such as pages viewed, clicks and approximate location. Clarity may record anonymised session interactions. Neither receives the images you check.
Hosting
The site is hosted on Vercel, which keeps standard server logs (IP address, user agent, time of request).
Your choices
- Block analytics cookies with your browser or an extension; the detector still works.
- Stop after the on-device result if you don't want an image sent to the pattern model.
- Ask us about or delete subscription data: contact page.