Privacy Policy

1. Information We Collect

When you create an account, we collect your email address and, for email/password accounts, a hashed form of your password that cannot be reversed into the original. When you sign in with Google, we additionally collect your name and profile picture. At registration we also record a one-way hash of your IP address, used only to limit automated account creation; the raw address is not stored. When you upload images for copyright analysis, the images are temporarily stored on Vercel Blob for processing and are not retained after analysis. We also collect usage data such as the number of image checks you perform and your credit balance.

2. How We Use Your Information

We use your information to provide and improve the copyright checking service, maintain your account and credit balance, process payments, and communicate with you about service updates. We also keep a usage log of each check you run — the time, how long it took, whether it succeeded or failed, the outcome of the check, the country the check came from, and the credits charged — to monitor reliability and improve the service. This log does not contain your images or their contents, and it does not store your IP address — the country is kept as a two-letter code only. We do not sell your personal information to third parties.

3. Data Retention

Uploaded images are processed in temporary storage and deleted after analysis; we do not retain the images themselves. Account information (name, email, password hash, registration IP hash, avatar, credit balance, payment history) is retained for as long as your account exists. You may request deletion of your account and associated data at any time by contacting us.

4. Your Rights (GDPR & CCPA)

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your personal data
• Portability — receive your data in a machine-readable format
• Restriction & objection — limit or object to certain processing
• Non-discrimination — we will not discriminate against you for exercising these rights

To exercise any of these rights, email support@image-copyright-checker.com. We respond to verifiable requests within 30 days.

5. Cookies

We use essential cookies for authentication (Auth.js session) and Google Analytics to understand site usage. We also use Microsoft Clarity, which records anonymised sessions and heatmaps of how visitors use the site. You can disable cookies in your browser settings, but this may affect site functionality, including the ability to sign in.

6. Third-Party Services

We use Google OAuth and email/password credentials for authentication, SerpAPI for reverse image search, Stripe for payment processing, Vercel for hosting and storage, and Microsoft Clarity for usage analytics. Each service has its own privacy policy, and each processes data only as necessary to provide its function.

7. Children's Privacy

Our service is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

8. Data Security

We take reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS), restricted database access, and authentication controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Contact

For privacy-related questions or to exercise your rights, contact us at support@image-copyright-checker.com.