Privacy Policy

1. What we collect

To operate the Service's free, quota-based model, we collect:

• The email address you enter, a timestamp, and whether and when you accepted the Terms of Service;
• If you arrive via a partner link, a short-lived first-party referral code, so we can credit the partner (see Affiliate attribution below);
• Your cookie-consent choices, recorded by CookieYes, our consent management provider (see Cookies and consent below);
• Standard analytics data from Google Analytics 4: the pages you view, your approximate city-level location, browser and device type, the website you came from, and UTM campaign parameters present in the link you used (see Analytics below). The text you submit for detection is never stored, logged, or sent to any analytics service.

2. What we do NOT collect

We do not use advertising cookies, fingerprinting, or social widgets. The only external scripts on our pages are Google Analytics and the CookieYes consent banner. Google Analytics cookies are first-party and are set only after you accept the Analytics category (see Analytics and Cookies and consent below). We do not read, store or share the text you process, and we do not use analytics data for advertising or to build a profile of you.

3. Analytics

The Service uses Google Analytics 4 to understand how visitors find and use it. When a page loads, the Google tag sends Google the page you visited, the website you came from, your browser and device type, your approximate city-level location, and any UTM campaign parameters in the URL.

Google Analytics sets first-party cookies (for example _ga and _gid) to count visits and distinguish returning visitors. We load Analytics only after you accept the Analytics category in the banner (Google Consent Mode v2); before that, no analytics cookies are set. If you reject or ignore the banner, analytics stays off. We do not set advertising cookies, and we do not use the analytics data for advertising or to build a profile of you.

• UTM parameters (utm_source, utm_medium, utm_campaign) identify which launch or partner link brought you. They are ordinary URL parameters; we do not store them on your account.
• The text you submit is never sent to Google Analytics. Analytics collects page-load events only.
• You can opt out at any time by changing the Analytics category in the banner, installing the Google Analytics opt-out browser add-on, blocking cookies in your browser, or contacting us at the address below.
• Google processes analytics data under its own privacy policy (policies.google.com/privacy).

4. Cookies and consent

We use CookieYes, a consent management platform, to ask for your cookie choices before any non-necessary cookie runs. The banner groups cookies into categories; "Necessary" is always on:

The complete list of cookies is in the Cookie Policy. You can change your choices at any time with the banner's "Cookie Settings" control.

• Necessary: the session/auth cookie, security cookies, and the CookieYes consent record.
• Functional: the aid_ref partner-credit cookie, set only when you open a partner link.
• Analytics: Google Analytics _ga and _gid, set only with your permission.

5. Affiliate attribution

Occasionally the Service operates a partner (affiliate) program. When you open a partner's link we set a single, first-party, httpOnly cookie named `aid_ref` that stores the partner's code. It is used only to credit the partner if you create an account; it is not used to profile you or to share your activity with anyone.

• The cookie is set only when you arrive through a partner link, is limited to this site, and expires after 30 days or as soon as we record your referral, whichever comes first.
• We also store on your account a record that a partner referred you (the partner's reference and a timestamp), solely to pay that partner a commission; it is visible to you and to the partner for accounting purposes.
• You can opt out at any time by refusing the Functional category in the banner, clearing your browser cookies, or contacting us at the email below.

6. How content is handled

Your text is processed in memory to compute the detection signals and is discarded immediately. It is not written to logs, not stored, and not retained after your request. Nothing is kept that would let us reconstruct what you submitted.

7. Why we collect an email

• Enforcing the free daily quota;
• Preventing abuse and spam;
• Operating the Service's free, quota-based model.

8. Storage and retention

Email addresses and usage timestamps are stored securely on the server. Consent records are kept only as long as needed to evidence your choices. Analytics data is processed and stored by Google on Google's servers under its own privacy policy; we do not store it on our servers. We do not sell, rent or share your data with anyone. You may request deletion of your data at any time via the contact address below.

9. Data security

All traffic is TLS-encrypted. Customer content is processed in memory and deleted after delivery. Sign-in uses signed, httpOnly session cookies; per-IP rate limits and a disposable-email blocklist slow abuse; job processing is fail-closed. Access to account data is limited to the people who operate the Service. The detection engine is open source, so the processing logic can be audited at any time.

10. Your rights (GDPR and U.S. state laws)

Depending on where you live, you have these rights:

To exercise any right, email the contact address below. We verify your identity before acting, respond within the period the applicable law requires, and never charge a fee for exercising these rights.

• EEA/UK/Switzerland (GDPR, UK GDPR, FADP): access, rectification, erasure, restriction of processing, portability, and objection to processing. You may also complain to a supervisory authority, in the UK the Information Commissioner's Office.
• California (CCPA/CPRA): know and access, deletion, correction, limitation of sensitive personal information, and the right not to be discriminated against for exercising these rights. We do not sell, share, or use personal information for cross-context behavioral advertising, so there is no opt-out of sale to exercise.
• Other U.S. state privacy laws: similar rights to know, correct, delete, and port your personal information.

11. Third-party services

We use a small number of third-party services. None of them receives the text you submit for detection; your content is processed only by our own open-source engine on our own infrastructure.

Each processes data under its own privacy policy and, for EEA/UK personal data, under adequate safeguards (adequacy decisions or standard contractual clauses).

• Google LLC — Google Analytics 4 (aggregate usage statistics, see Analytics) and Google sign-in (authentication; your email address).
• Stripe, Inc. — subscriptions and API credits; card data is handled by Stripe, and we never see full card numbers.
• CookieYes — consent banner and consent records (IP address, choice made, time).
• Cloudflare, Inc. — proxy and CDN delivering the public pages; technical request data (IP address, user agent) for security.

12. International transfers

Your content is processed on our own infrastructure and is not transferred to any other country. Account, billing, analytics, and consent data may be processed by the third parties listed above, which operate in various countries. EEA/UK personal data transfers to those processors rely on adequacy decisions or standard contractual clauses; details are available on request.

13. Legal basis (GDPR)

For visitors in the EEA/UK, our legal bases are: consent (running Google Analytics after you accept the Analytics category; providing your email and referral data to operate the Service and pay partners) and legitimate interest (abuse prevention, quota enforcement, and aggregate site measurement where consent is not required). You can withdraw consent at any time using the banner's "Cookie Settings" control or by contacting us.

14. Funding

The Service is free to use and continues to be supported by paid plans and the pay-per-usage API. We never sell, rent or share your data, emails, or content.

15. Children

The Service is not directed at children under 16, and we do not knowingly collect their data.

16. Changes

We may update this Policy. Material changes will be announced on this page.

17. Contact & deletion requests

To request deletion of your data or ask any privacy question: [email protected]. See also the Cookie Policy and the Data Processing Addendum for Business and API users.