Privacy policy

Your images

Images you upload are stored privately in object storage. They are never placed in a public bucket and are never served from a public URL. The only way to reach a stored file is through a signed link that this site generates for you, and which stops working after 15 minutes.

They are deleted automatically on this schedule:

A scheduled job runs every 15 minutes and removes anything past its window. Deletion is permanent. We cannot recover a file for you afterwards, and neither can anyone else.

What we store

The complete list is short:

• Uploads and results. The images you send and the enlarged files we produce from them, until the schedule above deletes them.
• Usage counts. How many upscales an account has run this month, plus a receipt for each charged image: a hash of the image bytes and the factor you chose, never a copy of the image. The receipt is what makes a repeat download free and a failed job refundable.
• An IP hash, for the free allowance only. The free tier is counted per IP address, and the counter stores a hash of the address rather than the address. See below.
• Account details, if you sign up. Your email address, a bcrypt hash of your password, your plan, and the credit packs you hold. Your password itself is never stored.
• Payment identifiers, if you pay. Stripe handles the card, and we keep only the customer and subscription identifiers and the renewal date. See Payments below.

Metadata

EXIF and other embedded metadata are stripped from every image. That includes GPS coordinates, the camera or phone model, the capture timestamp, and any embedded preview thumbnail. There is no toggle for this: it is what the upscaler does, for every file.

What we do not do

• We do not look at your images.
• We do not train any model on your images, or let anyone else.
• We do not sell your images or your data, and we do not share either with anyone for their own use.
• We run no advertising and no third-party advertising trackers.

Accounts

If you create an account we store your email address, a bcrypt hash of your password, your plan, and a per-month count of how many images you have upscaled. We never store your password. API keys are stored only as a SHA-256 hash, which is why a key is shown to you exactly once and cannot be recovered afterwards.

Payments

Payments are processed by Stripe. Card details are entered on a page Stripe hosts and never touch our servers. We store the Stripe customer and subscription identifiers, your plan, and your renewal date. Stripe has its own privacy policy covering what it holds.

Errors

When something breaks we record the error, the page it happened on, and a stack trace, so it can be fixed. Error reports do not contain your images. If you are signed in they may contain your account id, which is how a report gets connected to a bug you told us about.

Anonymous use

You can use the upscaler without an account, and the free allowance is 3 upscales a day. Doing so creates no user record. The upscaled file is stored under a random identifier and deleted on the schedule above.

Your IP address

The free allowance is counted per IP address so it cannot be reset by clearing a browser or opening a private window. Counting it stores a hash of the address and a number for the day, and nothing else: the address itself is never written to storage. This is the only use of an IP address on the site. It is not used to build a profile, it is not joined to anything else we hold, and a paid account is counted in credits instead. The counter resets at 00:00 UTC.

Getting your data, or removing it

Deleting your account removes your user record, your API keys, your usage history, and your job history. Your images are already gone, on the schedule above. To ask for a copy of what we hold, or for deletion, write to the address below.

Contact

Questions about this policy, and requests to see or delete what we hold, can go to [email protected]. Who operates Image Upscaler is set out on the about page.