Privacy Policy
BlankAI is built on a single principle: your images never leave your device. This policy explains what we collect, what we don't, and how we protect your privacy.
Zero Server Uploads
All image processing happens 100% in your browser. We never receive, store, or transmit your images.
Minimal Data Collection
We use Google Analytics for page views and product events. Events never contain your images or their metadata.
No Selling of Data
We don't sell or share data for advertising, and we don't build user profiles.
1. Overview
BlankAI ("we," "us," or "our") operates the website located at https://blankai.app (the "Service"). This Privacy Policy describes how we handle information in connection with your use of the Service.
BlankAI is a browser-based image processing tool. The core functionality — removing AI metadata, EXIF data, C2PA credentials, GPS tags, and other hidden image metadata — is executed entirely within your web browser using the HTML5 Canvas API and Web Crypto API. At no point during image processing are your images transmitted to our servers or any third-party server.
2. Image Data — What We Don't Collect
We want to be unambiguous: BlankAI does not collect, receive, store, process, or transmit your images in any form. When you upload an image to BlankAI:
- The image is loaded directly into your browser's memory via the HTML5 File API.
- All processing (metadata scanning, canvas rendering, encoding and hash computation) occurs locally on your device.
- The processed image is returned to you as a downloadable file generated in your browser.
- No image data, metadata, or file content is sent over the network at any point.
This architecture is by design. We cannot access your images even if we wanted to.
3. Information We Do Collect
While we don't collect image data, we do collect limited, non-personal information to operate and improve the Service:
3.1 Analytics Data
We use Google Analytics 4 to understand how the Service is used. It records pages visited, referring pages, approximate location (country or city level, derived from your IP address), device and browser type, and product events such as "images processed", "download clicked" or "metadata types found" (for example, whether a GPS block was present). These events never include your images, file names, or the contents of any metadata. Google Analytics uses cookies to distinguish visits; see Section 4. You can opt out with Google's browser add-on at tools.google.com/dlpage/gaoptout or by blocking cookies for this site. If we enable an additional privacy-focused analytics service in the future, it will be listed in Section 5.
3.2 Request Data
The site is hosted on Cloudflare Pages. Cloudflare processes standard request data, such as IP address, browser type, requested URL and timestamps, to deliver the site and protect it from abuse. We do not run our own application servers and do not build personal profiles from this data.
3.3 Local Storage
BlankAI uses your browser's localStorage and sessionStorage to temporarily store processing state (e.g., passing a processed image to the Image Diff tool within the same session). This data never leaves your device and is cleared when you close your browser session or clear your browser storage.
5. Third-Party Services
BlankAI uses a small number of third-party services to operate. Each is listed below with a description of the data they may access:
| Service | Purpose | Data Shared |
|---|---|---|
| Cloudflare | CDN, DDoS protection, DNS | IP address, request metadata |
| Google Analytics | Usage analytics | IP address, device and browser data, pages visited, product events (never images or metadata contents) |
| Google Fonts | Typography (Space Grotesk, Inter) | IP address (font request) |
We do not sell, rent, or share your personal data with any third party for marketing or advertising purposes.
6. Data Security
All connections to BlankAI are encrypted via HTTPS/TLS. Because image processing occurs entirely in your browser, the primary security boundary is your own device. We recommend using an up-to-date browser and operating system to ensure the security of your local processing environment.
For the limited data that is collected (analytics and request data), we rely on the security practices of Google and Cloudflare and restrict account access to the people who run BlankAI.
7. Children's Privacy
BlankAI is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at [email protected] and we will promptly delete it.
8. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Erasure: Request deletion of personal data associated with you.
- Right to Rectification: Request correction of inaccurate personal data.
- Right to Object: Object to processing of your personal data.
- Right to Portability: Request a machine-readable copy of your data.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
9. GDPR & CCPA Compliance
For users in the European Economic Area (EEA), our legal basis for processing analytics data is legitimate interests (improving the Service) under Article 6(1)(f) of the GDPR. You can object at any time by blocking analytics cookies or using the opt-out described in Section 3.1.
For California residents under the California Consumer Privacy Act (CCPA): BlankAI does not sell personal information. You have the right to know what personal information is collected, to delete personal information, and to opt-out of the sale of personal information (which we do not engage in).
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will provide a more prominent notice. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: [email protected]
Website: https://blankai.app