Privacy
Last updated
Your photographs are sent to an AI provider to be processed, stored in Europe, and deleted automatically after seven days, or thirty if you are signed in. We do not sell anything to anyone and we do not use your photographs to train models. There are no advertising trackers and no third party cookies. We count visits with a service that sets no cookie and identifies nobody.
What we collect
The photographs you upload, and the results produced from them. This is the only thing we ask for, and you can use most tools without an account.
Your email address, if you make an account. Accounts are handled by Clerk, who also hold whatever you used to sign in with, such as a Google account.
Your IP address, stored against a counter of how many jobs it has run today. This is what stops one person running the site up an unpayable bill, and it is the only reason we keep it.
How the site is used. We count visits with Cloudflare Web Analytics, which records the page, the site that sent you here, and the rough details of your browser and country. It is how we find out which tools people actually want.
It is deliberately the incurious kind. It sets no cookie, stores no identifier in your browser, and does not fingerprint your device, so it cannot tell whether two visits were the same person, and it cannot follow you to any other site. That is also why you are not being asked to agree to it: there is nothing stored on your device to ask about. It never sees a photograph, a result, or a file name, because it is not given them.
We chose it over the better known analytics for exactly that reason. The alternative would have meant a cookie, a consent bar on every page, and a record of what you did tied to an identifier that lasts.
Nothing else. There are no advertising trackers, no third party cookies, and nothing here is sold or shared for marketing. The only cookies are the one that keeps you signed in and one anonymous identifier that lets you see your own results before you have an account.
Who else sees your photographs
A photograph cannot be processed without being sent to the model that processes it. When you run a tool, your photograph is sent to fal.ai, who run the AI models on their own hardware, and it returns as a result. They are a company in the United States, so this involves your photograph leaving Europe.
We do not use your photographs to train anything, and we do not license, sell, or publish them.
The other companies involved in running the service:
- Cloudflare R2 stores the uploads and results. The buckets are created under Cloudflare's European jurisdiction, so the files themselves are held in Europe.
- Neon hosts the database, which holds your account, your credit history, and a record of which tool each job ran. It does not hold your photographs.
- Clerk handles sign in and holds your email address.
- Cloudflare Turnstile may show a challenge to prove you are not a script. It sees your IP address.
- Cloudflare Web Analytics counts visits. It sees the page you are on and the request that fetched it, and it stores nothing on your device.
- Hetzner hosts the servers that run the site.
How long anything is kept
- Photographs and results: seven days if you ran the tool without an account, and thirty days if you were signed in. Both the upload and the result are deleted automatically from storage. This is not a manual process and there is nothing you need to do.
- The record that a job ran outlives the files: which tool, when, and what it cost in credits. It is kept because it is your billing history. The photograph is gone.
- IP addresses: fourteen days, then the counter and the address in it are deleted.
- Your account is kept until you ask us to delete it.
Your rights
If you are in the United Kingdom or the European Economic Area, the UK GDPR and the GDPR give you the right to ask for a copy of what we hold about you, to have it corrected, to have it deleted, and to object to how it is used. Those rights are not conditional on being in those places: ask and we will do it.
The lawful basis for processing your photograph is performing the service you asked for. The lawful basis for keeping IP counters is our legitimate interest in not being bankrupted by abuse.
To ask for anything, or to complain about how this is handled, write to us at [email protected].
Children
PhotoTools.ai is not intended for children under 13, and we do not knowingly collect anything from them.
Changes
If this changes in a way that affects what happens to your photographs, the date at the top changes and we will say so on the site rather than quietly editing the page.
Terms of service and acceptable use are separate documents.