Privacy Policy
What we collect when you check an image, who processes it, and how long anything is kept.
2026/11/03
Last updated: November 6, 2026
AIDetectorAll ("we", "us") checks whether an image was made or edited with AI. People often check pictures of other people, so we collect as little as we can and do not store the images you check. This policy explains what we handle, why, who helps us, and what you can ask of us.
The service is operated by High-tech Zone Runlin Software R&D Studio (Individual Proprietorship), Unit 28, 23/F, No. 13 Shida Street, High-tech Zone, Dalian, Liaoning, China ("AIDetectorAll"). For privacy questions write to privacy@aidetectorall.com.
The short version
- We do not store the image you check. It is processed in memory and discarded when the result is ready.
- To run the check, the image is sent to independent AI detection providers. They process it under their own data terms, and some may keep it for a limited time (details and names below).
- We do not use your images to train anything.
- Results are produced automatically by software, with no human review, and can be wrong.
- You can check one image a day without an account. We never ask for your name.
- We do not identify people, run face recognition, or keep face data.
- We do not sell personal data or share it for advertising.
What we collect
Images you check
When you check an image, your browser first reads the file's own details (content credentials, AI labels, camera and editing information). The file is then sent to our check service, which reads those details again and, unless the file itself settles the question, sends it to independent AI detection providers for a score.
We do not store the image. Our check service holds it in memory only while the check runs. What stays afterwards:
- the result and the evidence description;
- the file's fingerprint (a SHA-256 hash) together with the detection scores for that file, so the same file checked again gets the same answer without being sent to the providers again. The fingerprint cannot be turned back into the image.
If you leave to buy a report, the image waits in your own browser's storage (not on our servers) so the report can run when you come back. It is removed after the report runs or after 24 hours.
Shared result links show the verdict and evidence, not the image, unless you choose to add it.
Photos sent from your phone
If you use From phone on a computer, the QR code opens a page where your phone sends one photo. That photo is held in our storage (Cloudflare R2) only until your computer picks it up, then deleted at once; a photo that is never picked up is deleted within one day. The code expires after 10 minutes.
Images you read with the metadata viewer
The image metadata viewer reads the file entirely in your browser. The image and its fields, including any GPS location, are never sent to us or to anyone else. We count only that a file was read and how many fields it had, never their values.
Account and purchase details
You do not need an account to check an image. If you buy reports, the payment page asks for your email address; that email becomes your account so you can use your reports on any device. You sign in with a one-time link we email you; there is no password. You can also sign in with Google, in which case Google shares your name, email address and profile picture with us.
We keep your email, your report credits and your purchase history (amount, date, package). Card details are handled by the payment provider and never reach us.
Technical data
-
Your IP address is used to keep the free check fair (one a day) and to stop abuse. We store only a salted, one-way hash of it, which expires after two days. The raw address is not stored or logged.
-
Cookies: a random anonymous ID (so a purchase can be linked back to the browser that made it), a sign-in session if you sign in, your language, and a human-check token. See the Cookie Policy.
-
Human check: Cloudflare Turnstile checks that a request comes from a person. Cloudflare sees your IP address and browser signals for this.
-
Usage statistics: we count page views and a few steps of the check (started, finished with which result, report button clicked, payment completed) to see which pages help people and where they get stuck. We use Microsoft Clarity (heatmaps and anonymised session replays) and Umami (page and event counts), both set up without cookies. Uploaded images, file names and results' images are masked and never appear in replays, and event data never contains your email or file names.
Why we use it (legal bases)
| Purpose | Legal basis (EU/UK GDPR) |
|---|---|
| Running the check you ask for | Performance of a contract (Art. 6(1)(b)) |
| Selling and delivering reports, keeping purchase records | Contract; legal obligation for tax and accounting records (Art. 6(1)(c)) |
| One free check a day, abuse prevention, security | Legitimate interests in keeping the service available and affordable (Art. 6(1)(f)) |
| Cookieless usage statistics | Legitimate interests in understanding which pages work (Art. 6(1)(f)) |
| Legal reports about child sexual abuse material | Legal obligation |
Who processes your data
We send images only as file bytes, never as links, and only to the services needed for the check you asked for. The AI detection providers act as our processors: they receive the image to score it and return a result.
| Service | What it receives | When | Retention and training |
|---|---|---|---|
| Cloudflare, Inc. (US) | Everything that passes through the site: hosting, check service, human check, photos sent from a phone (R2, until picked up) | Always | Under Cloudflare's data processing addendum |
| Sightengine (France) | The image | Checks the file itself does not settle, and full reports | Its documentation says images are deleted after processing by default |
| Hive (Castle Global, Inc., US) | The image | When the first score is not clearly real, and in full reports | Its documentation says customer data is kept for 14 days by default |
| Neon (US, AWS us-east-1) | Account, credits, results without images | Always | Our database |
| Resend (US) | Your email address and the sign-in or receipt email | When we email you | Email delivery |
| Creem (payment provider and merchant of record) | Your email, payment and billing details | When you buy | Creem is the seller of record and keeps transaction records as the law requires |
| Stripe (backup payment provider) | Same as Creem | Only if we switch payment providers | Same |
| Google (Sign-in) | Your sign-in request | Only if you choose Google sign-in | Google's privacy policy |
| Microsoft Clarity (US) | Pages visited, clicks and scrolls, browser and device type, approximate location from IP; masked replays without images | Every visit | Microsoft deletes Clarity data after a limited period (Clarity documentation) |
| Umami (Umami Software) | Page views and the funnel events above, referrer, browser and country; no cookies | Every visit | Aggregate statistics |
Some of these services are in the United States. When we transfer personal data from the EU, UK or Switzerland, we rely on the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework where the provider is certified.
How long we keep things
| Data | How long |
|---|---|
| Images | Not stored by us; held in memory only during the check. Detection providers: see the table above |
| Fingerprint and detection scores for a file | Up to 365 days, so the same file is not sent to the providers again |
| Results and fingerprints | Until you delete them, or 30 days for checks made without an account |
| Hashed IP for the daily limit | 2 days |
| Account and credits | Until you delete your account; unused credits expire 365 days after purchase |
| Purchase records | As long as tax law requires (usually up to 10 years), kept by us and the payment provider |
| Server logs | Up to 30 days, without image contents or raw IP addresses |
Your rights
Wherever you live, you can ask us to:
- tell you what we hold about you and give you a copy;
- correct it;
- delete it, including your account and results;
- stop using it for a purpose based on our legitimate interests;
Signed-in users can delete individual checks and their whole account in Settings. For anything else write to privacy@aidetectorall.com; we reply within 30 days. If you are in the EU or UK you may also complain to your data protection authority.
California and other US states: we do not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information to infer characteristics about you.
Automated results
Every result is produced automatically by software: rules applied to the evidence in the file and to scores from independent AI detection models. No person reviews it, and it can be wrong in both directions. A result describes the image only; it is not a decision about you or anyone in the picture, and it should not be the only basis for an accusation or a legal decision. If you think a result is wrong, tell us through the link on the result.
What we never do
- Identify who is in a picture, or keep face templates.
- Train detection models on your images. If we ever want examples to improve accuracy, we will ask separately, per image, and you can withdraw.
- Publish your images. Public example pages use only images that were already public and are reviewed by a person first.
Illegal content
We do not allow child sexual abuse material. When we become aware of it we must preserve it and report it to the National Center for Missing & Exploited Children (NCMEC) and, where required, to authorities. See the Content Policy.
Children
The service is not directed to children under 13 (16 in the EU and UK), and you must be 18 or older to buy reports.
Security
Images travel over HTTPS and are not written to our storage. Access to our systems is limited to what each part needs.
Changes
If we change this policy in a way that matters, we will update the date above and, for account holders, email you before the change takes effect.
Contact
Privacy questions: privacy@aidetectorall.com. Everything else: support@aidetectorall.com.