Privacy Policy

Last updated: April 11, 2026

What We Collect

When you use Don't Steal My Artwork, we collect the following:

Account token — a randomly generated identifier stored in your browser's local storage. We do not collect your name, email address, or any personal information.
Usage data — timestamps and counts of watermark operations for credit tracking and rate limiting.
IP address — logged temporarily for abuse prevention and rate limiting. IP logs are retained for no more than 30 days.
Payment data — PayPal order IDs and transaction amounts. We do not store your PayPal email, credit card details, or any financial information. All payment processing is handled entirely by PayPal.

Your Images

We do not store your images permanently. Images uploaded for watermark embedding, verification, or pattern extraction are processed in memory and temporarily saved to enable download. All temporary image files are automatically deleted within 1 hour of creation.

We do not view, analyze, sell, share, or use your images for any purpose other than performing the watermark operation you requested.

Your original artwork and your secret key never leave your device unless you explicitly upload them for processing. We strongly recommend keeping your own backup of all original files.

Cookies and Local Storage

We use browser local storage to save your account token so you don't lose your credits between visits. We do not use tracking cookies, analytics cookies, or any third-party tracking.

Third-Party Services

PayPal — processes credit pack purchases. Subject to PayPal's Privacy Policy.
hCaptcha — prevents automated abuse during registration. Subject to hCaptcha's Privacy Policy.
Railway — hosts the application. Subject to Railway's Privacy Policy.

Data Retention

Account tokens and credit balances: retained until the service is discontinued.
Uploaded images: automatically deleted within 1 hour.
IP logs: retained for no more than 30 days.
Purchase records: retained for accounting and dispute resolution purposes.

Your Rights

Since we don't collect personal information (no name, no email, no account), there is no personal data profile to request or delete. Your browser's local storage token can be cleared at any time by clearing your browser data — this will disassociate you from any remaining credits.

Children

This service is not directed at children under 13. We do not knowingly collect information from children.

Changes

We may update this policy from time to time. Changes will be reflected by the "Last updated" date at the top of this page.

Contact

If you have questions about this privacy policy, contact us through the domain registrar's contact information for dontstealmyartwork.com.