Privacy policy

Most of what WipeTheAI does happens on your own device. Removing metadata, scanning a file and the “Keep it looking the same” pass all run in your browser, and the image is not sent to us for any of them. The free tools work the same way (compressing, converting and resizing images; merging, splitting and compressing PDFs; converting Markdown): no sign-in, no upload, and nothing is kept once you close the tab.

Images you choose to wipe with Maximum disruption

This mode needs a GPU, so the tool warns you and then uploads the image, after its metadata has already been removed on your device. It goes to our storage on Google Cloud in the United States (region us-central1). Our GPU provider, RunPod, downloads it through a link that expires after an hour, processes it, and uploads the result back to the same storage. RunPod receives no other information about you.

An uploaded image is deleted automatically 7 days after you send it, and its result 30 days after it is made. Until then you can delete either from Your images. Deleted files stay recoverable in our storage for 7 more days (a safety net against mistakes) and are then erased. Each job also has a record of when it ran, the size and location of its files, and your account ID; the record stays after the images are gone, until you delete it or your account.

Signing in with Google

If you sign in, Google shares your name, email address, profile photo link and a Google account ID with us. We use them only to create your account, show who is signed in, and link your jobs to your account. We ask for no other access to your Google account, and we don’t receive your password.

WipeTheAI’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Analytics

We use Google Analytics to count visits and see which features people use: which pages are opened, whether a wipe or a free tool run started, finished or failed, which mode and output format were chosen, the image type (JPEG, PNG or WebP), and whether you signed in, signed out or created an account. It never receives your images, documents, file names, text you type or paste, what a scan found in a file, your email address or your account ID.

If you visit from the EU (including its overseas regions), Iceland, Liechtenstein, Norway, the UK, Gibraltar, Jersey, Guernsey or the Isle of Man, or we can’t tell where you are, we ask first. Until you accept analytics cookies, Google Analytics runs without cookies and sends only anonymous pings that can’t recognise you on a later visit. Everywhere else, analytics cookies are on unless you turn them off. These cookies recognise your browser on later visits for up to 2 years. To tell where you are, we check only the country your connection comes from, as reported by Cloudflare; we don’t store it. You can change your answer at any time with “Cookie settings” at the bottom of every page. Google handles this data under its privacy policy.

Cookies and similar storage

• A sign-in cookie that keeps you signed in for up to 30 days.
• A short-lived cookie used only while Google sign-in is in progress (10 minutes).
• Google Analytics cookies (_ga) for up to 2 years, only if you accept them (or, outside the regions above, unless you turn them off).
• Your light or dark theme choice and your analytics cookie answer, kept in your browser’s local storage.

Abuse limits

To limit how many Maximum disruption images one account can start per day and per hour, we keep a count against a one-way hash of your account ID. Each job also records a one-way hash of your IP address. The IP address itself is not stored.

What we don’t do

No advertising, and no selling or sharing of your data. Analytics is limited to what the section above describes. Your images and account details are not used to train AI models.

Who processes your data

• Google Cloud: hosting, database and image storage (United States).
• Cloudflare: delivers the site’s pages and tells us which country a visit comes from. Your images don’t pass through it.
• RunPod: GPU processing for Maximum disruption jobs.
• Google: sign-in, if you choose to sign in.
• Google Analytics: visit and feature-use counts, as described above.

Your choices

The free tools work without signing in; wiping an image needs a Google sign-in, and the lighter wipe never uploads anything. Signed in, open Account from your photo at the top of the page to see what we hold and to delete your account yourself: that removes your account, every uploaded image and result, and their job records at once, and removed files are fully erased from our storage within 7 days. The per-account counts behind the daily and hourly limits hold no personal details and expire on their own. You can also email [email protected] to find out what we hold or to have it deleted; the contact page lists what to include so we can find your files.