Privacy Policy
Short version: your photos are not stored by us, we run no analytics or advertising trackers, and the only cookie we set is the one that keeps you signed in. The longer version below is specific about what does happen, including the parts we do not control.
1. What this covers
This policy covers shadowfix.app and the tools on it. It describes what we collect, why, who else sees it, and how to get rid of it.
2. The photos you upload
The two browser tools are different from the rest. The photo tinter and the red-eye remover run entirely in your browser using the Canvas API. Your image is never sent anywhere — not to us, not to anyone else. They work with your network disconnected. No account is needed for them.
The AI tools send your photo to a processing provider. Removing shadows, glare and passport-photo shadows needs models we do not host. When you use one, your image is transmitted over TLS to fal.ai, which runs the model and returns the result.
What we keep: nothing but a link. The uploaded file exists only in memory for the length of the request. We store the resulting image's URL in a cache for up to 7 days, keyed by a hash of your file, so that re-uploading the same photo returns the earlier result without charging you again. We do not store the image itself and we do not keep a copy of what you uploaded.
What the provider keeps — and this part is not ours to control: fal's documentation states that request payloads are retained for 30 days by default. Because your image is part of that payload, fal holds a copy for that period. For the generated result we explicitly set a 7-day expiry so it is removed from their CDN rather than kept indefinitely, which is their default. We have no enterprise agreement with fal covering model training, so we cannot and do not make any promise about whether your content is used for that. If any of this is not acceptable for a particular image, use the two browser tools instead, or do not upload it.
3. Your account
The AI tools require a Google sign-in. We receive and store your Google account identifier, your email address, your plan, your credit balance, and the timestamps of when the account was created and last used. We do not receive your Google password, and we request no access to anything else in your Google account.
3b. Interest in paid plans
Paid plans are not open yet. If you press the button asking to be notified when they are, we record your account id, your email, which plan you were interested in and the date — so we can tell you when it opens. Nothing else. It is deleted along with everything else when you delete your account.
4. Technical data
Rate limiting. To stop one visitor from exhausting the service, we count requests per IP address per minute. Your IP is stored in that counter and the row is deleted automatically once it expires. It is not linked to your account and is not used for anything else.
Hosting. The site runs on Cloudflare, which processes connection data (including IP addresses) to serve and protect the site. See Cloudflare's privacy policy.
No analytics, no advertising. There is no Google Analytics, no advertising pixel, no session recorder and no third-party tracking script anywhere on this site. We do not build profiles of visitors and we sell nothing to anyone.
5. Cookies
One cookie, sf_session, set only after you sign in. It holds a random session token — no personal
data is inside it. It is HttpOnly, Secure, SameSite=Lax and expires after 30 days.
Signing out or deleting your account clears it immediately. There are no advertising or analytics cookies, which is
why you are not being asked to accept anything.
6. Who else sees your data
- fal.ai — runs the AI models. Receives the image you upload. See section 2.
- Google — only for sign-in, and only what you approve at the consent screen.
- Cloudflare — hosting, storage and network protection.
- Stripe — will handle payments when paid plans open. Card details go directly to Stripe; we never see or store them. Not active at the time of writing.
Nobody else. We do not sell, rent or share personal data for marketing.
7. How long we keep things
- Uploaded images — not retained by us. In memory for the request only.
- Result links — 7 days.
- Account record — until you delete it.
- Sign-in session — 30 days, or until you sign out.
- Monthly usage counter — about 40 days, then swept automatically.
- Rate-limit counter — minutes.
- Paid-plan interest record — until you delete your account, or until we email you about the launch.
8. Your rights
You can delete your account and everything attached to it yourself, at any time, from your account page. That removes your user record, every session, and your usage counters. There is nothing left to ask us for afterwards. If you have an active paid subscription, cancel it first so you are not billed for an account that no longer exists.
Depending on where you live you may also have rights to access, correct, export or object to processing of your data. Email [email protected] and we will handle it.
9. Children
This service is not intended for children under 13, and we do not knowingly collect their data.
10. Changes
If this policy changes materially, the date at the top changes with it. Continuing to use the service after that means you accept the revised version.