Privacy Policy

The short version

Full detail below. If anything is unclear, ask us.

Your images and files

Processing happens in your browser

Your browser reads the file and processes it with an AI model running on your own processor or graphics card. There is no upload step in the tool at all. Disconnect from the internet once the page has loaded and it keeps working — the simplest proof nothing leaves your machine.

The model is downloaded, nothing is uploaded

On first use your browser downloads AI model files from a public host (Hugging Face) and caches them. That is one-way: files come down, your images do not go up. As with any download, that host sees ordinary request data such as your IP address and browser type. It never receives your images.

Passing an image between our pages

Drop an image on our homepage and we park it briefly in your browser's own storage (IndexedDB) so the tool page can collect it. It is deleted the moment the tool claims it, and discarded if older than five minutes. We cannot read it.

Results are saved by you, to you

Downloads are generated in your browser and saved straight to your device. We keep no copy, because we never had one.

What we collect

What you send through the contact form

The name, email, subject and message you type, plus the sending IP address and time — the last two to block spam and abuse.

What your browser sends automatically

Like every website, our servers log standard technical data: IP address, browser and operating system, page requested, date and time. These logs keep the site running, diagnose errors and detect attacks.

What we do not collect

• Your images, videos or any file you process.
• Accounts, passwords or payment details — there are none.
• Behavioural profiles, ad identifiers or cross-site tracking.
• Special category data (health, biometrics, political views). Please do not send any through the form.

How we use it

• To answer you — replying to and following up on your enquiry.
• To keep the service secure — rate-limiting the form, blocking spam, investigating abuse.
• To fix the site — error logs tell us what broke.
• To meet legal obligations — where the law requires it.

We do not profile you, advertise to you, or train AI models on your data.

Legal bases

If you are in the EEA or UK, the bases we rely on:

• Consent — you choose to send the contact form. Withdraw any time by asking us to delete the message.
• Legitimate interests — keeping the site available and secure, preventing abuse, fixing faults. Weighed against your rights, with data kept to a minimum.
• Legal obligation — where law requires us to retain or produce information.

Our GDPR page covers these in more detail.

Cookies and browser storage

No advertising or analytics cookies, and therefore no cookie banner. We set two strictly necessary cookies: one keeps your visit consistent, one protects the contact form against forged submissions.

Separately, your browser stores the cached AI model and the short-lived image hand-off on your device. These are not cookies, are never sent to us, and you can clear them any time.

The Cookie Policy lists each item, its purpose and lifetime.

Third parties

• Our hosting provider — runs the servers and stores the contact messages.
• The public AI model host — serves the model files your browser downloads. Sees standard request data such as your IP; never your images.
• Our email provider — carries our replies to you.

We do not sell, rent or trade personal data, and do not share it for advertising. We disclose to a public authority only where legally required.

How long we keep it

• Contact messages — while we handle your enquiry, then up to 24 months, then deleted. Sooner on request.
• Server and error logs — typically no more than 12 months.
• Anything in your browser — on your device, under your control, clearable whenever you like.

Your rights

Wherever you live, you can ask us to:

• tell you what data we hold about you, and give you a copy;
• correct anything wrong or out of date;
• delete it;
• stop or restrict a particular use;
• send it to you, or to someone else, in a portable format.

Use the contact form with the subject "Privacy question". We respond within 30 days. We may ask you to confirm the email address a request relates to, so we do not hand one person's data to another. Requests are free, and we will not treat you differently for making one.

How we protect data

The strongest protection is architectural: the files you care about never leave your device, so there is no library of user images to breach.

For what we do hold: HTTPS throughout, a rate-limited contact form protected against automated submissions, and database access restricted to the people who operate the service. No system is perfectly secure, but we keep the data at risk as near zero as the product allows.

International transfers

Our providers may process data outside your country, including outside the EEA and UK. Where that happens we rely on legally recognised mechanisms — an adequacy decision, or Standard Contractual Clauses — so protection stays equivalent. See the GDPR page.

Children's privacy

Useful Tool Ai is not directed at children and we do not knowingly collect data from anyone under 16. If you believe a child has sent us personal data, tell us and we will delete it.

Changes to this policy

If we change how we handle data we will update this page and the "Last updated" date. Significant changes will be described plainly, not buried. Continuing to use the site after an update means the revised policy applies.

Contact us

For questions about this policy or a request you want to make, use our contact form and choose the subject "Privacy question".

Useful Tool Ai is the controller of the personal data described here.