Privacy Policy

The whole purpose of this website is to help protect your privacy by removing metadata from your files. We work to protect your privacy as much as possible.

This policy explains what we collect, what we don't collect, and how third-party services on this site handle data.

Your Files

When you upload a file, it is transferred over an encrypted HTTPS connection and stored in encrypted cloud storage. The file is decrypted only long enough to strip its metadata in a secure, isolated serverless environment. The cleaned file is then saved back to encrypted storage and made available for you to download.

We do not read, log, or retain the contents of your files. The file contents are only accessed by the automated processing pipeline to perform metadata removal — no human or logging system inspects what is inside your files.

Files are automatically deleted within 24 hours. Uploaded and cleaned files are removed by automated R2 bucket lifecycle policies within 24 hours of upload. Job processing records are also purged by a daily scheduled cleanup. There is no manual process or archive; deletion is automatic.

What is stored temporarily: the original uploaded file (in the uploads/ prefix), the cleaned output file (in the cleaned/ prefix), and a minimal job record in our database (the filename and processing status). The job record contains no file contents and is also deleted by the same 24-hour cleanup job.

Third-Party Services

This site uses several third-party services that may collect data about your visit. We do not control their data practices; see each provider's own privacy policy for details.

GDPR & CCPA

For users in the European Union (GDPR): Our legal basis for processing your file is the performance of a service you explicitly request (Article 6(1)(b) GDPR). We do not retain your file contents beyond the 24-hour deletion window, and we do not use your file data for profiling or marketing. Third-party services listed above may separately act as data controllers under their own bases; please review their policies. To request deletion of any personal data we hold, contact us at the address below — in practice, all uploaded file data is deleted automatically within 24 hours.

For California residents (CCPA): We do not sell your personal information. The file you upload is processed solely to provide the metadata removal service and is deleted within 24 hours. The third-party analytics and monitoring services listed above may collect data as described; we do not use it for advertising.

Contact

Questions about this policy, or to submit a data deletion request? Email devon@justblackmagic.com or visit Black Magic Consulting.