Overview
Redact is a browser-based image redaction tool at imageredaction.com. This policy explains what happens to information when you visit the site or use the editor. It applies to this website and the editor. It does not apply to other sites we link to.
Two sentences cover most of it: your image is processed in your browser and is never uploaded, and we do not ask for an account, an email address, or any other personal detail before you use the tool. The longer version follows.
Who we are
Redact (“we”, “us”, “our”) operates imageredaction.com. For any question about this policy or about how the site handles information, email hello@imageredaction.com. That is also the contact for access, correction, and deletion requests.
What we collect
We do not collect personal information through the editor. There is no sign-up, no login, no payment step, and no profile. We do not know who you are, what you redact, or how often you use the tool.
Information reaches us only in these narrow cases:
- You choose to email us. We then receive your email address and whatever you include in the message.
- Your browser requests the site. Our hosting provider processes standard technical data to deliver and secure the pages, as described under hosting logs.
- You run Smart detect. The page asks a public CDN for the OCR library and language data. That request does not include your image. See third-party requests.
We do not use analytics, advertising pixels, session recording, or cross-site trackers. We do not sell, rent, or share personal information.
Your images and files
The file you choose is read by your browser and drawn to an in-memory canvas. It is not sent to us or to any third party. There is no upload endpoint on this site, so there is no copy of your image for us to store, review, log, or delete.
Redactions, undo history, and unsaved edits live in the current browser tab. Closing or reloading the page clears them. We cannot recover them because we never receive them.
When you export, your browser encodes a new image from the canvas and saves it on your device. Re-encoding leaves the original EXIF, GPS coordinates, device details, and file name behind. The redactions are baked into the pixels of the new file.
You can confirm the claim yourself: open your browser’s developer tools, switch to the Network tab, load an image, and draw a few boxes. Your image will not appear in the request list. The privacy page walks through the same check.
Third-party requests
One part of the editor is not served from our domain. The first time you run Smart detect in a browser, the page loads Tesseract.js from jsDelivr, together with the OCR engine and English language data that Tesseract requests. Those files are necessary for the feature. They are not requested at all if you only redact manually.
Your image is not part of those requests. Tesseract runs in a Web Worker inside your browser and receives the image from the page, in memory, not over the network.
jsDelivr is a content delivery network with its own privacy practices. Like any CDN, it may see the requesting IP address, user agent, and requested URL, and it may keep standard access logs. We do not control its logs or retention periods. See jsDelivr’s own policy for details.
Everything else — the pages, styles, scripts, and the Inter font — is served from this site. We do not load Google Fonts, embedded videos, social widgets, or third-party analytics.
Hosting logs
imageredaction.com is delivered as a static site through a hosting provider and its network. When your browser requests a page or file, the provider necessarily processes technical data such as your IP address, user agent, requested path, timestamp, and response status. That data is used to deliver the site, keep it secure, and diagnose abuse.
We do not use these logs to build a profile or to identify individual visitors. Retention is governed by the hosting provider’s standard practices. Your image never appears in these logs because it is never requested from the server.
Email you send us
If you use the contact form, it does not submit data to a server. It prepares a message and opens your own email app. Nothing is sent until you press send there.
When you email us, we receive your email address, any name you include, and the content of the message. We use it to reply to you and keep it only as long as needed to handle the conversation. We do not add you to a mailing list, sell your address, or use it for advertising.
Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to complain to a supervisory authority. Examples include the GDPR in the European Economic Area and the United Kingdom, the Digital Personal Data Protection Act in India, and the CCPA/CPRA in California.
Because the editor collects no personal data, there is usually nothing for us to access or delete. If you have emailed us, you can ask us to delete that correspondence, subject to any legal obligation to keep it.
We do not sell or share personal information for cross-context behavioural advertising. To make a request, email hello@imageredaction.com from the address you used. We may ask for enough information to find the relevant correspondence.
Children
The site is not directed to children under 13, or under 16 where local law sets a higher age. We do not knowingly collect personal information from children. If a child has emailed us, a parent or guardian can contact us and we will delete the correspondence.
Security
Processing images locally removes a whole class of risk: there is no image store to breach and no upload in transit. The site is served over HTTPS, and the code that touches your image runs in your browser.
No system is perfect. If you find a security or privacy problem, email us with enough detail to reproduce it. Please do not include a real image containing sensitive data in the report; a synthetic sample is enough.
Changes to this policy
We may update this policy when the tool or the law changes. The date near the top of this page shows the latest version. Material changes will be reflected here. Continuing to use the site after an update means the revised policy applies.
Contact
Questions, corrections, or data requests: hello@imageredaction.com. For a privacy issue with the editor, include your browser and the request you saw in the Network tab — but never send a real image containing sensitive data.
If you are looking for a plain explanation of how local processing works, read the privacy notes. If you want to know the rules for using the site, read the terms and conditions.