Privacy

Privacy

Shadecote is built so that there is as little of your data to protect as possible. Finding faces, cutting the masks, blurring and zipping all happen inside the page in your browser. Your photographs never leave your device. The only thing downloaded is the face-detection model, once per session.

What the server sees

To run accounts and subscriptions, the server keeps your account details and usage counts: successful sign-ups and sign-ins, plus the numbers of photographs processed and faces found. Processing observations may include processing timings, available browser memory measurements, main-thread long-task time as a CPU-pressure estimate, and processor count. We use these records for aggregate performance measurements; the subscription is not metered on them. Raw metric events are deleted after 90 days. Photograph contents and filenames are not sent: face finding, masking, blurring and zipping stay in your browser, and photograph pixels are never uploaded.

Signing in with Google

You can sign in with Google instead of an email link. Doing so tells us your email address and whether Google has verified it. That's all we keep: your Google account ID, name, profile picture and any access token are discarded the moment sign-in finishes, never stored. As with every other way of signing in, your photographs still never leave your device.

Cookies

The site uses a single session cookie to keep you signed in. There is no advertising, no third-party tracking, and no analytics that follows you around the web.

Your data

You can ask for a copy of your account data, or ask for it to be deleted, at any time. See the contact page. Deleting your account removes your details and usage record.