Privacy policy
Last updated 27 September 2026 · Consent version 2026-09-27.v1
In short
When you upload something, we store the file and record your IP address, approximate location, and details about your device and browser. Your file is sent to Hugging Face for analysis. We ask for your explicit consent before any of this happens, and you can request erasure at any time using the form at the bottom of this page.
Who is responsible
AI Analyser is operated by the site operator. For any question about your data, or to exercise any of the rights below, contact [email protected].
What we collect
When you submit a file or text for analysis, we record:
- The content itself — the file you upload or the text you paste, stored in private cloud storage, together with its name, size and type.
- Your IP address, both in full and as a one-way hash used for rate limiting.
- Approximate location — country, region, city and city-level coordinates, derived from your IP address by our hosting provider. This is not GPS data and does not identify your exact position.
- Precise location — only if you choose to share it. The upload form has an optional “share precise location” control. If you use it, your browser asks your permission, and only if you allow it do we receive your device's GPS coordinates and their accuracy. If you ignore it or decline, we never receive them and the check works exactly the same.
- Device and browser details — user agent, browser and version, operating system, device type, screen and window size, pixel ratio, timezone, language preferences and the page that referred you.
- The analysis result and a timestamped record of your consent.
We do not ask for your name, email address or any account details, because there are no accounts.
Why we collect it
- To run the analysis you asked for and show you the result.
- To keep a backup of submissions so results remain retrievable from their link.
- To prevent abuse and enforce the limit of 100 checks per hour, which is what the hashed IP address is for.
- To understand where the service is used and improve detection accuracy.
Legal basis
We rely on your consent, given when you upload a file after being told what is collected, under the EU and UK GDPR and India's Digital Personal Data Protection Act. The notice sits beside the upload button. You can withdraw it at any time by requesting deletion below. Withdrawing consent does not affect processing that already took place.
Who else sees your data
Your uploaded content is shared with the following processors. It is never sold, and never shared for advertising.
- Hugging Face — your file or text is transmitted to their inference API so the detection models can analyse it. This is the one place your actual content leaves our infrastructure. Requests are pinned to Hugging Face's own inference, never routed to third-party inference providers. Hugging Face states that it does not store request bodies or responses and does not use submitted data for training.
- Vercel — hosts the site and stores uploaded files, and supplies the approximate location derived from your IP address.
- Our database provider — stores the records described above.
These providers operate internationally, so your data may be processed outside your country.
Your uploads are not used to train anything
We do not sell your data, share it with advertisers, or use it to train any model — ours or anyone else's.
The detection models are classifiers, not chatbots. They take an image or a passage of text and return a single score; they do not generate text, retain what they are shown, or learn from it. Requests go to Hugging Face's own inference endpoint rather than any third-party provider, and Hugging Face states that request bodies and responses are not stored and submitted data is not used for training. No large language model — no ChatGPT, Claude, Gemini or similar — ever receives what you upload.
Who can see a result
Result pages are not indexed by search engines, but they are not password-protected either. Anyone who has the link can view the result and the uploaded file. Share result links only with people you intend to see the content.
How long we keep it
Uploads, results and the associated metadata are kept until you ask us to delete them. Rate-limiting records are discarded automatically after 24 hours.
Cookies
One cookie is set, named aia_visitor. It holds a random identifier so you can see your own past checks on the “My checks” page. It is not used for advertising or tracking across other sites, and there are no third-party analytics or advertising cookies.
Your rights
Depending on where you live, you have the right to access a copy of your data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent. You also have the right to complain to your data protection authority.
Use the form below, or email [email protected]. We respond within 30 days.
Children
This service is not intended for children under 16. We do not knowingly collect their data; if you believe a child has used the service, contact us and we will delete the records.
Delete my data
Paste a result link or its id to request erasure of that single submission, or of every check made from this browser.
Requests are reviewed before they are carried out, which guards against someone deleting a record that is not theirs. Erasure removes the stored file, the analysis and all recorded metadata, cannot be undone, and is completed within 30 days of your request — usually far sooner. If you would like confirmation once it is done, email [email protected] and we will reply when the records are gone.
Changes
If this policy changes materially we will update the consent version shown at the top of this page and ask for consent again on your next upload.