Image processing
Image files are processed by a third party and stored privately for a short time. Inputs are cleared following processing or failure. Successful results remain downloadable for a maximum of one hour, backed by a final 24-hour storage deletion rule.
Optional provider checks
The OpenAI checker waits for separate consent before transferring an image to OpenAI; OpenAI says this check is not eligible for Zero Data Retention. The Google checker lets you open Gemini and upload directly to Google. The selected provider's own terms apply.
Abuse prevention and records
Service limits rely on anonymous browser and keyed network identifiers, with no raw IP address storage. Records used for temporary uploads are removed after seven days. Limited history of processing is retained indefinitely and includes opaque job and batch references, stage times, outcomes, dimensions, costs and numerical measurements. This retained history contains neither image files nor filenames, extracted text, account details, network identifiers or access credentials. Cloudflare can handle standard request data for security and network analytics.
Accounts and sign-in
Account records contain email addresses, linked provider IDs and hashed login tokens. You can use email, Google or GitHub and, if available, Microsoft or Facebook; adding a provider link requires confirmation of the email address. Passwords, credit-card details and provider access tokens are never saved. Login codes and challenges expire after 10 minutes, while sessions expire after 30 days; maintenance deletes expired authentication records. Cloudflare handles sign-in messages and one welcome email per new account. GitHub is asked for email access without any repository permissions.
Here, we retain a keyed email hash and a minimal grant record across our websites to prevent repeat signup offers.
Account follow-up
After three days without payment, new accounts may get one email seeking feedback and offering extra credits. Across our sites, repeat prevention uses a keyed email hash, signup time, delivery state, opt-out and redemption record. Unsubscribe through Account or the message without stopping login emails. Delivery is in English through Cloudflare; reply to reach support. Opens and clicks remain untracked.
API keys
API access saves key names, masked prefixes and keyed hashes, with no full-key storage. Newly generated keys appear only at creation. Use your account to revoke a key, whose revoked record is removed seven days later. API uploads have the same temporary storage and image retention as website uploads.
Payments and account deletion
Stripe handles the payment information. Dollar-balance entries and minimal payment/refund receipts are stored outside image storage for seven years. Financial records include opaque job references, while excluding images, filenames and extracted image text. Use your account email when asking support for deletion or a refund of unused funds; records required for payments, disputes and applicable obligations may remain.
Support mailbox
Messages to support@geminiwatermarks.com, including permitted attachments, are stored privately in the operator mailbox for support responses. Active conversations are retained until an operator deletes the conversation. Trash is removed by the next daily maintenance run after becoming eligible at 30 days. Cloudflare manages routing, storage, access controls and transactional message delivery for this mailbox. Leave out credentials and highly sensitive personal information.
Form feedback, along with a reply address if you include one, follows this mailbox's existing storage and deletion rules.
Pricing presentation tests
We no longer compare pricing layouts; detailed experiment records are kept for 90 days, then only aggregate totals without browser or account identifiers remain.
Tracking and controls
No ad pixels, advertising profiles or data-broker integrations are used here. Browser storage is needed for limits and active uploads. Locally saved original-image previews clear when the image is deleted, the stored batch is replaced or expired results are revisited. Account previews additionally live in private storage for other devices and follow result deletion after one hour of access, with a 24-hour backup storage limit. Use the available “Delete now” action or contact support@geminiwatermarks.com, without sharing job credentials.