Privacy Policy

1. Information we collect

• Account information: your email address and password (stored as a salted hash, never in plain text).
• Content you upload: the photos or videos you submit to be checked, any "safe copy" or protected/watermarked copy generated from them, and the privacy findings we detect (e.g. location metadata, visible text, faces).
• Suspicious files you upload for verification: when you use the watermark-lookup feature, we temporarily process the file you submit to look for one of your own fingerprints.
• Payment records: we do not process or store card details. Payments are handled entirely by our payment processor, NOWPayments (cryptocurrency); we keep only the order amount, status, and a payment reference ID needed to reconcile your purchase.
• Usage and security data: IP address and basic request metadata, used only to secure the Service (e.g. rate-limiting logins and uploads) and kept in server logs for a limited time.
• Session cookie: a single, signed, HTTP-only cookie that keeps you logged in.
• Analytics: we use Google Analytics to see aggregate traffic and which pages and signup/purchase steps people use, via cookies and similar identifiers in your browser. We do not use it to identify you personally, and it never sees the content of files you upload.
• Advertising measurement: we use the Meta Pixel and Meta Conversions API to measure whether our ads on Facebook and Instagram lead to a free check, a signup or a purchase. This uses cookies, your IP address, browser information and, once you have an account, a hashed (one-way encrypted) form of your email address. Meta never receives the content of files you upload.

2. How we use it

• To scan your content for hidden metadata and visible identifying details, and to show you the results.
• To generate a cleaned copy of your file with unsafe metadata removed, if you ask us to.
• To generate a uniquely fingerprinted and, optionally, visibly watermarked copy for a recipient you specify, and to later help you check whether a suspicious file traces back to one of your own copies.
• To process your purchase of Privacy Checks and maintain your balance.
• To send you transactional email — a welcome message when you sign up, and a notice when a check finishes — and, if you request it, a password-reset email.
• To detect abuse, enforce our Terms of Service, and keep the Service secure.

3. Who we share it with

We do not sell your data. We share it only as needed to run the Service:

• NOWPayments — processes your cryptocurrency payment. We never see your wallet's private keys.
• A visual-AI provider (e.g. OpenAI or Anthropic) — when this feature is enabled on our end, an image you upload may be sent to that provider solely to look for visible privacy risks (faces, screens, documents, etc.) at your request. If no provider is configured, this step is skipped entirely and clearly marked as such in your results.
• Our cloud storage and hosting providers — store the files and data described above on our behalf, under contract, and do not use them for their own purposes.
• Google Analytics — receives aggregate usage data (pages visited, general location from IP, signup/purchase events) to help us understand and improve the Service. It never receives the content of files you upload.
• Meta Platforms — receives ad-measurement events (visits, free-check, signup and purchase steps) with your IP address, browser information, Meta cookie identifiers and, for account holders, a hashed email address, so we can measure and improve our Facebook and Instagram ads. It never receives the content of files you upload.

4. How long we keep it

We keep your content, findings, and protected copies until you delete them yourself, or until you delete your account — deleting a piece of content or your account removes the associated files and records from our systems. Payment and ledger records may be kept longer where we need them for accounting or fraud prevention.

5. Your choices

You can delete any individual file from your dashboard at any time, which removes it and everything derived from it immediately. You can change your password or email from your Account page. To delete your account entirely or ask what data we hold about you, email us — see Contact below.

6. Age requirement

The Service is for users aged 18 and over. We do not knowingly collect information from anyone under 18, and you may not upload content depicting a minor. If you believe a minor has used the Service, contact us and we will act on it promptly.

7. Security

We use reasonable technical measures — encrypted transport, hashed passwords, access controls on stored files — to protect your information. No method of transmission or storage is perfectly secure, and we can't guarantee absolute security.

8. Changes to this policy

If we materially change how we handle your data, we'll update the date at the top of this page and, where appropriate, notify you directly.

9. Contact

Questions about this policy, or a request about your data: support@deltasquad.net.