PRIVACY
Your curiosity. Your privacy.
What you share
To create an account, you provide a username and password. We store a salted password hash and a hash of your recovery code, never the plain password or recovery code. No email address is requested.
Your photographs
Uploaded images and optional notes are sent to OpenAI to produce the analysis. This website does not save the uploaded photo or notes. They are processed transiently on the server. Do not include private documents, precise locations, or unnecessary personal information.
OpenAI processing
We request store:false on Responses API calls. This setting does not mean zero provider retention: OpenAI may retain content in accordance with its API data policies and your organization’s data controls. Please review OpenAI’s API data policy for details.
Results and account data
Text results are stored with your account for up to 30 days. You can clear the visible history from the tool. Minimal usage records are kept for the same period to enforce daily allowances, so clearing history does not reset your quota. Accounts remain until removed by the operator.
Cookies and security
A first-party HttpOnly session cookie keeps you signed in for up to 30 days. It uses Secure on HTTPS and SameSite=Strict. We use Google Analytics cookies as described below. A daily, site-specific hash of an IP address is used for abuse prevention; raw IP addresses are not stored in the application database. The hosting provider may process connection metadata under its own policies.
Control your data
Use Clear history to remove saved text results and Sign out to revoke your current session. Keep your recovery code private. For account deletion, ask the site operator to remove the account data.
Website analytics
We use Google Analytics 4 to measure page visits, traffic sources, scrolling, and other website interactions. Google Analytics may use first-party cookies such as _ga to recognize visits. Each website has a separate Analytics property. Our tracking integration does not send uploaded images, optional notes, passwords, recovery codes, account usernames, or analysis results to Google Analytics, and it removes query strings and fragments from the page URL it sends. Browser privacy settings or content blockers can restrict analytics tracking. Google processes analytics information under its privacy policies.