Overview
SimpleEraser is an online tool for removing people and text from photos. This page explains what information we handle when you use it, why, and who helps us do it. If anything here is unclear, email us at [email protected].
Your photos
When you click erase, your photo and the brush mask you painted are sent from your browser to our servers, and from there to an established cloud AI image-processing service, which produces the edited image we send back to you. Photos are processed only to carry out the edit you asked for.
Our application does not keep your original photo or the edited result once the request is finished.
To detect content that isn't allowed, the photo you upload and the result we generate may be sent temporarily to a third-party content moderation provider. For this check, a short-lived copy is placed in private storage and is removed as soon as the check completes. If an image is flagged, we may decline to process it. We keep a short record of each moderation outcome (the status and category, not the image) for about 30 days.
How these providers handle data is governed by their own terms and privacy policies. Under its terms, the moderation provider may have people review content that its system flags.
Signing in
Signing in is optional. If you sign in:
- With Google: we receive and store your email address, your Google account identifier, and the name and profile picture link your Google account provides.
- With email: we store your email address and send you a 6-digit code through our email provider. We store the code only in hashed form, and it expires after 10 minutes. We limit how many codes can be requested and how many wrong guesses are allowed.
Signing in sets a session cookie that keeps you signed in for up to 30 days, or until you sign out. It is used only for sign-in. When you sign in, we also link your browser's anonymous identifier (see below) to your account so your free edits are counted consistently.
Buying credits
If you buy credits, the payment is handled by Stripe. You enter your card or other payment details on Stripe's checkout page; we never receive or store your full card number. We send Stripe your account email and an internal account ID so the payment can be matched to your account.
From Stripe we receive and keep the order details we need: order and payment identifiers, which pack you bought, the number of credits, the amount and currency, the date, and whether the payment was refunded or disputed. Stripe handles your payment information under its own privacy policy.
Anonymous identifier and analytics
To recognize returning visits and connect the actions you take on the site, our pages store a random anonymous identifier in your browser's local storage. This is a first-party identifier, not a third-party advertising cookie. We also store your first visit details in local storage: the page you landed on, the website that referred you, and any campaign (UTM) parameters in the link.
Our own analytics records may include:
- the pages you visit and where you came from;
- how you use the tool, such as uploading a photo, submitting an edit, seeing a result, downloading it, how long you looked at the result, and whether the edit succeeded or failed (with a general error type);
- your browser's time zone;
- your device type, browser and operating system, in broad categories rather than your full browser details;
- approximate location (country, region and city) and time zone, estimated from your IP address by our hosting provider.
These records do not contain your photos or your IP address. So that one visitor is not counted twice when their browser storage is cleared, each record also carries a short code computed from your IP address and browser details with a secret key. The code changes every day and cannot be turned back into your IP address.
We also use Umami, a web analytics service, to see aggregate traffic and feature usage on our tool pages. We configure it to respect your browser's Do Not Track setting, and we do not send it your anonymous identifier.
Abuse prevention and IP addresses
To keep free edits fair and to protect the service from abuse, we convert your IP address into a one-way hash and use that hash to count free edits and to limit requests. We do not store your raw IP address in our own databases. Our hosting and infrastructure providers may process IP addresses as needed to deliver the site and keep it secure.
For each edit attempt, we keep a record that links the request identifiers, the outcome and the free-edit counters that were used, including the IP hash, for about 30 days. This lets us return a free edit when an edit fails.
When you sign in by email, we use Cloudflare Turnstile to check that the request comes from a real person. Cloudflare processes your IP address and related request information for that check.
Service providers
We rely on these providers to run SimpleEraser:
- Cloudflare: website hosting, databases, temporary private storage, and Turnstile.
- Google: cloud hosting, storage of free-edit counters, credit balances and request records, and Google sign-in.
- Cloud computing and AI image-processing providers: producing the edited image.
- Stripe: payment processing for credit purchases.
- Resend: sending sign-in code emails.
- Umami: web analytics.
- A third-party content moderation provider: checking uploaded photos and results for content that isn't allowed.
Your browser also loads fonts, styles and some example images from content delivery networks and font providers (for example Google Fonts). Like any web request, these requests reveal your IP address to them.
How long we keep things
- Sign-in codes: 10 minutes.
- Sign-in sessions: up to 30 days.
- Edit attempt records: about 30 days.
- Free-trial and abuse-prevention counters: only as long as reasonably needed to enforce limits and protect the service.
- Purchase records and credit balances: for as long as your account exists, and longer where we need them for accounting, tax or legal reasons.
- Feedback you write on our site: the text you send, the page you sent it from, and your account or anonymous browser identifier, so we can review it and add any credits to the right account. We may email you about your feedback (for example, to tell you credits were added or to ask a follow-up question), and you can reply to those emails. Kept as long as we need it to improve the service and keep a record of credits we gave.
- Emails you send us (including feedback and any photos you choose to attach): kept in our mailbox only as long as we need them to reply, review feedback or keep a record of credits we gave. Photos sent by email are used only to understand your message.
- Moderation outcome records: about 30 days.
- Temporary moderation copies of photos: removed as soon as the check completes.
- Account details and analytics records: kept for as long as we need them to run and improve the service, or until you ask us to review them for removal.
Your choices
- You can clear your browser's site data at any time, which removes the anonymous identifier from your browser.
- You can turn on Do Not Track in your browser to opt out of Umami analytics.
- You can sign out whenever you like, which ends your session.
- You can ask questions or make requests about your data by emailing [email protected].
Changes to this policy
We may update this policy as SimpleEraser changes. The date at the top shows when it was last updated. Using the service is also subject to our Terms of Service.
Contact
Questions about privacy? Email [email protected] or visit our Contact page.