Local processing
Your browser reads the selected image and passes it locally to the metadata parser, official C2PA WebAssembly reader, ONNX visual classifier, and separate N-rated content model. The N-rated model estimates whether visible nudity or sexual content may be unsuitable for a general audience. Original image bytes, inference tensors, and raw model outputs remain in the browser; same-origin model and runtime requests contain no file data. A separately re-encoded preview may later be published as described below. This probabilistic screening signal is not an age rating or a finding about any person’s age, identity, consent, intent, or the legality of the image. The filename, metadata text, hashes, raw credential, and full local report are not uploaded during a scan.
Remote URL imports
When you submit a public URL, this service sends the URL to its same-origin fetch endpoint. The server downloads at most 100 MB into bounded memory, returns the bytes to your browser, and does not save the fetched file. The source website receives a request from this server. Private, local, link-local, credentialed, and unsupported addresses are blocked, including after redirects. Browser-local analysis and the normal 24-hour image-publication rules then apply.
Anonymous activity counters
The public header shows approximate site activity. One visit is normally counted once per browser and UTC day using a local-storage date flag shared across tabs, including a first entry through an SEO landing page; a file check is counted only after local analysis completes. Counter requests contain only the event schema and event type, while the domain identifies the tool. They contain no image, filename, prompt, metadata, score, result, UUID, cookie, persistent device identifier, or IP-derived identifier. If local storage is unavailable, deduplication cannot be guaranteed, so these numbers are estimates rather than unique people.
Automatic 24-hour publication
The picker and drop zone state before selection that a completed scan will publish. The browser creates a new metadata-free JPEG preview and sends that derived copy with normalized evidence categories, a rounded visual score, and rounded N-rated classification and model score. Raw N-rated logits, tensors, crops, and body-part labels are not published. The result receives a public UUID URL and appears in Recent results for up to 24 hours. Anyone can view, copy, or cache its published information. When the N-rated estimate is uncertain, detected, or unavailable, the public UUID preview is replaced with a neutral placeholder and the result is excluded from Recent results. The original, filename, raw report, raw metadata, hashes, and raw C2PA record are not uploaded.
Storage and deletion
The automatic public-result store contains only the sanitized preview, whitelisted result summary, generated social card, creation and expiry times, and a hash of a random deletion credential. New automatic results expire after 24 hours; older explicitly created links retain the expiry promised when they were created. Physical cleanup runs at least every six hours. The credential is stored in this browser for immediate deletion. Deletion or expiry cannot revoke a preview already cached by Telegram or another third party.
Operational logs
Standard web logs may record an IP address, requested path, response status, and timestamp for security and reliability. They do not contain the original image, published field values, counter payload content, or deletion credential.
Required resources
The page downloads its JavaScript, fonts, C2PA WASM engine, AI-pattern and N-rated model weights, and bundled official C2PA trust-list snapshot from the same origin. Model files may be kept in the normal browser HTTP cache. These requests do not include your file or result.
Analytics
Google Analytics remains disabled unless you explicitly allow it. Events contain only the static tool identity. File names, share IDs, URLs, images, prompts, metadata, hashes, N-rated classifications and scores, result values, and deletion credentials are excluded.
Contact
Email: eschota@gmail.com. Please do not email image files or sensitive embedded metadata.