Privacy Policy

Last updated: [待确认：上线日]

The short version

We process your photo, hand it back, and delete it within 1 hour. We don't store your photos, don't train models on them, and don't sell your personal information. Details below.

What we collect

1. Photos you upload. Processed in real time and automatically deleted within 1 hour — originals and results alike. We don't keep them, publish them, or use them to train AI models.
2. Anti-abuse visitor identifier. To keep the free tier fair and prevent abuse, we compute a privacy-preserving visitor identifier from your browser fingerprint and IP address (stored only as a one-way hash, never in plain text, auto-expired within 48 hours). It is used solely for rate-limiting and abuse prevention — never for advertising or cross-site tracking.
3. Technical data. IP address (for rate limiting), device and browser information, and usage events via Google Analytics 4.
4. Waitlist email address. If you join the waitlist on our pricing page, we store your email address to notify you about launch and paid plans. Every email includes an unsubscribe link; unsubscribing deletes your address from the list. We don't use it for unrelated marketing.
5. (When paid plans launch) Google account information. If you choose to sign in with Google, we receive your Google account ID, email address, and display name to manage your credits, orders, and subscription. We never store browser fingerprints for signed-in users.
6. Cookies. We use cookies for Google Analytics. We do not run advertising cookies at launch.

Who processes your data

• Cloudflare — hosting, content delivery, temporary storage, and bot protection.
• OpenRouter, Inc. (United States) — routes your photo to AI models for processing. Images you upload are processed by third-party AI providers via OpenRouter, Inc. (United States); the underlying inference infrastructure is Alibaba Cloud International. OpenRouter does not use your inputs for model training and does not retain prompts by default (per its published Zero Data Retention policy). We do not retain your images beyond 1 hour.
• Sightengine — automated safety screening of uploaded images.
• Google Analytics 4 — usage analytics.
• (When paid plans launch) Google — sign-in. Creem (Armitage Labs OÜ, Estonia) — payment processing as Merchant of Record, including taxes and billing. We never see your card number.

How long we keep data

Photos: deleted within 1 hour. Visitor identifier: one-way hash, expires within 48 hours. Waitlist email: until you unsubscribe or convert to a paid plan. Analytics: Google Analytics default retention. Account and order records (when paid plans launch): retained as required for financial compliance [待确认：保留期，Owner 会计口径].

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, and to object to certain processing. California residents: we do not sell your personal information. To exercise any right, email privacy@matchafilterremover.app (or support@matchafilterremover.app).

International transfers

Your data is processed in the United States and on Cloudflare's global network, with AI inference on Alibaba Cloud International infrastructure.

Children

This service is not directed at children under 13, and we do not knowingly collect their personal information.

Your choices

Opt out of Google Analytics with the Google Analytics Opt-out Browser Add-on. Unsubscribe from waitlist emails via the link in any email.

Changes & contact

We'll post updates to this policy on this page. Questions: support@matchafilterremover.app.