Last updated: 1 November 2026.
1. File processing
Images you clean on StripAITags, including JPEG, PNG, WebP and browser-supported HEIC, are processed locally in your browser. PDFs and supported RAW photos are also processed in your browser. Our cleaning tools do not upload the original files or cleaned outputs to our servers, and we do not store their contents.
Downloads are saved to the location you choose on your device. Your browser, operating system or cloud-backup settings may retain or synchronise them. Keep your original and review the result. Browser memory and format support affect processing. Do not send file contents in a support message.
2. Account, usage and security information
Browser-only file processing does not mean that the website collects no information. We store account email addresses, password hashes or Google sign-in identifiers, plan and expiry details, usage counters, and account status. Passwords are hashed, not stored as readable text.
To operate quotas, prevent abuse and troubleshoot the service, we process visitor identifiers, IP addresses, browser information, visit timestamps and country information where available. Guest quotas may use a keyed identifier derived from an IP address, so visitors sharing a network may share an allowance. The hosting provider may also maintain technical access and security logs.
3. Contact messages and payments
When you use Contact, we store the name, email address, subject, category, message, optional payment reference, request status and administrator response in our private support database. The form does not accept attachments. Administrators access these records to investigate and resolve your request. Anyone with the complete private ticket URL can read that ticket; keep the link secure.
Razorpay processes payments. We retain order references, purchased plan, amount, payment status and transaction dates for billing, reconciliation and refunds. Do not send us full card numbers, CVV codes, banking passwords or OTPs. Review Razorpay's Privacy Policy for its handling of payment information.
4. Essential cookies and third-party services
Essential session, security and visitor cookies support sign-in, CSRF protection and usage limits. Google sign-in, when chosen, redirects you to Google and shares the account information needed to sign you in. If the optional country-lookup feature is enabled, your IP address is sent to country.is. Browser assets, fonts and styles may be requested from third-party CDNs; those providers receive the network information necessary to deliver them.
We use service providers for hosting, authentication and payment processing. These providers process information under their own terms and privacy policies. We do not sell the content of your files; the cleaning tools do not receive it.
5. Google AdSense and advertising cookies
Where advertising is enabled, third-party vendors, including Google, may use cookies and similar technologies to serve advertisements based on your prior visits to this website or other websites. Google's advertising cookies enable Google and its partners to serve ads based on visits to this and/or other sites on the Internet.
Advertising services may process IP addresses, device/browser information, cookie identifiers and interactions with advertisements for purposes such as ad delivery, measurement, fraud prevention and, where permitted and consented to, personalisation. Other participating advertising vendors or ad networks may also use cookies. The applicable consent message identifies the vendors and purposes for your choices.
You can manage Google's personalised advertising settings at Google My Ad Center. You may also opt out of certain participating third-party vendors' personalised advertising at AboutAds choices. Learn how Google uses information from sites and apps that use its services. Browser cookie controls provide additional choices, but disabling essential cookies may affect sign-in and quotas.
6. Consent and changing your choices
For applicable visitors in the European Economic Area, United Kingdom and Switzerland, advertising consent is handled through Google's certified consent management platform when configured and published. The message offers consent, refusal and granular settings. You can revisit available choices through the footer's Privacy & cookie choices link. If no applicable message is available, that link explains this instead of recording a false consent.
The application does not request its manual ad slots before receiving the configured consent signal. Rejecting optional advertising consent does not itself prevent file cleaning. If consent integration is not ready, manual ads remain disabled. We do not load optional analytics through this update.
7. Retention and access
Visitor records are configured for 90 days of retention when scheduled cleanup is running. Resolved or closed support tickets are scheduled for deletion 180 days after their last update when the support cleanup cron is running, unless needed for an ongoing dispute or legal obligation. Account information is retained while the account remains active or as needed for legitimate support and security purposes. Payment records may be retained as required for accounting, fraud prevention and applicable obligations. Backups and provider logs can have separate retention periods.
Access to account, support and payment records is limited to authorised operators and service providers who need it. We use HTTPS and access controls, but no online service can promise absolute security.
8. Your requests and contact
Contact us to request access, correction or deletion of your account or support information, or to raise a privacy concern. We may need to verify your identity. Some records may need to be retained for legal, billing, dispute or security reasons. Depending on your location, additional privacy rights may apply. This service is not directed at children under 13.
Use Contact → Privacy request or email stripaitags@gmail.com. We may update this policy as the service changes and will revise the date above.