Privacy notice

1. The photo you upload

Your image is read into the server's memory, forwarded to our image-model provider to perform the edit you asked for, and returned to your browser. It is not written to disk, an object store, a queue or a log, and it is not retained after the request completes.

Because the edit is performed by third-party models, your image leaves our server. It goes first to an API gateway, which forwards it to the image model that performs the edit — both are named in the sub-processor list below. We do not use your image to train anything, and we do not sell it.

2. The daily edit counter

To enforce the free daily limit we keep two counters per day, and both are checked on every edit:

• Network address. A one-way SHA-256 hash of your IP address combined with a secret salt. The raw address is not stored and the hash cannot be reversed.
• Cookie ID. A random 32-character identifier in a first-party cookie named eid, stored as a separate salted hash.

Using both means clearing cookies does not reset the allowance, and a shared network address does not hand an individual unlimited edits. A third counter holds only a date and a site-wide total; it contains nothing about any individual.

All three are deleted after 30 days.

3. Cookies and local storage

This site sets exactly one cookie: eid, a random identifier used only to count free edits. It is first-party, HttpOnly, Secure, SameSite=Lax, and expires after one year. It carries no personal information and is never sent to a third party.

There are no advertising or analytics cookies, and no third-party tracking scripts. If you enter a licence key, it is sent with your edit request and cached server-side as a validity result for 24 hours; it is not stored in a cookie.

You can block or delete the cookie in your browser. The free allowance still applies, because the network-address counter is independent.

4. What we do not collect

• No accounts, names, email addresses or passwords.
• No advertising identifiers, and no third-party ad or tracking scripts.
• No image files retained after the request.
• No location data beyond the coarse region implied by the network address used for the counter above.

5. Legal bases and your rights

Where the GDPR or similar law applies, the hashed counter is processed on the basis of legitimate interest in preventing abuse of a free service. You may request deletion of the counters associated with your address, or object to the processing, by writing to the address below. Because the hash is salted and one-way, we may need you to provide the address so we can recompute the hash and find the record.

You also have the right to complain to your local data protection authority.

6. Sub-processors

• Cloudflare — hosting, request routing and the database holding the hashed counters.
• APIMart (api.apimart.ai) — API gateway that accepts the image and instruction from us and routes the request to the model below. It processes the request on its own infrastructure.
• Google — the Gemini image model that performs the actual edit. Google receives the image and instruction through the gateway above and processes them on its own infrastructure.
• Both of the above, and Cloudflare, may retain request data for a limited period for abuse monitoring and billing under their own policies. We cannot make retention promises on their behalf, and this notice does not claim that no copy exists anywhere.
• Gumroad — licence verification, once Pro is on sale. Not used while Pro is unavailable.

7. Children

The service is not directed at children under 13 and we do not knowingly process their data. If you believe a child has used the service, contact us and we will remove any associated counters.

8. Changes and contact

If this notice changes materially, the date below changes with it. Questions or deletion requests: privacy@editedimage.com.

Last updated 15 November 2026.