Privacy policy — the short, honest version
The service that protects your privacy shouldn't undermine it. Here is everything we collect, and everything we don't.
Last updated:
1. Your photos: never uploaded
All file processing — viewing metadata and stripping it — happens locally in your browser, in memory, on your device. Your photos, and any data derived from them, are never transmitted to us or anyone else. You can verify this in your browser's network tools, or by disconnecting from the internet and using the tools offline.
2. What we do not have
- No accounts — there is nothing to sign up for.
- No file storage — we couldn't store your photos if we wanted to; they never reach a server.
- No cookies used for tracking, no advertising or cross-site trackers, no fingerprinting.
- No analytics on the contents of your files — we have no way to know what you processed.
3. What is collected (very little)
The site is served through Cloudflare, which keeps standard web-server logs (IP address, requested URL, timestamp) for security and abuse prevention, processed under Cloudflare's own privacy policy. We may use Cloudflare Web Analytics, which is cookieless and does not identify individual visitors — it reports page views and referrers in aggregate only.
4. Third-party content
The EXIF viewer offers a link that opens GPS coordinates in Google Maps, in a new tab, only if you click it. That request goes from your browser to Google under Google's terms — nothing is sent by us.
5. Children's privacy
The site is not directed at children and collects no personal information from anyone, children included.
6. Your rights
Because we never receive your photos or personal data, there is generally nothing for us to disclose, correct or delete. If you believe we hold any personal data about you (for example, from an email you sent us), write to hello@scrubexif.com and we will handle it promptly, in line with GDPR and CCPA obligations that apply to us.
7. Changes
If this policy changes materially, the updated date at the top will change with it. The commitment at the core — files processed only on your device — is the product itself, not a policy setting, and won't change.