Privacy policy

Your files

Files are opened, previewed and redacted in your browser. The redacted copy is created on your device and never uploaded.

To find personal information, AnyRedact sends part of the file to our server after you agree in the editor:

• the text read from the file, for detection;
• page images, if you turn on picture redaction;
• the speech in a recording, as low-quality mono sound in parts of a few minutes;
• the text with your redactions blacked out, if you run the final check.

The content goes over HTTPS to our Cloudflare Worker and is analysed by AI models running on Cloudflare Workers AI. It is held in memory for that request only. We do not store it or the results, do not log it, and do not use it to train models. If you decline, nothing is sent and you can redact by hand.

Scanned pages and images are read with the Tesseract OCR engine in your browser. Picture redaction also runs a face and object detector in your browser first. The browser downloads both from the jsDelivr CDN.

Data we keep

• Free allowance. Your browser keeps a random ID in local storage. For each day, we count how many credits that ID and your IP address used.
• Account. If you sign in, we keep your email address, your Google account ID if you use Google, your plan, your credit balances, your purchases and a sign-in session.
• Payments. Stripe takes the payment and keeps your card details. We receive your Stripe customer ID and what you bought.
• Logs. Cloudflare keeps short-lived request logs, such as IP address, URL and errors, for security and abuse prevention.
• Analytics. Google Analytics counts page views. Each visit sends the page address without its query or anchor, the page title, and your browser, device type and approximate location. File names, file content and findings are never sent.

We do not sell personal data and do not use advertising.

Cookies and local storage

Signing in sets a session cookie for 30 days and a cookie that tells the page you are signed in. Google sign-in sets a short-lived cookie that protects the login. Local storage keeps the free allowance ID and your settings, such as the theme and your analytics choice. These are needed for the site to work.

Google Analytics sets _ga cookies that last up to 2 years. In the EU, EEA, UK and Switzerland they are only set after you accept them in the bar at the bottom of the page; until then Google Analytics counts the visit without cookies. Elsewhere they are set unless you decline. You can change your choice at any time with the Cookies button at the bottom of every page, and declining deletes these cookies.

Who processes data

• Cloudflare hosts the site, runs the AI models and sends sign-in emails.
• Stripe handles payments, subscriptions and refunds.
• Google confirms your identity if you sign in with Google, and runs Google Analytics with Google signals and ad personalisation turned off.
• jsDelivr serves the OCR engine and picture models to your browser.

These providers may process data outside your country, under their own safeguards for international transfers.

Purpose and legal basis

We use this data to provide the service you ask for, to count free and paid use, to take payments and to prevent abuse. We use analytics to see which pages people use. The legal bases are the contract with you, our legitimate interest in keeping the service secure and fair, your consent for analytics cookies where the law asks for it, and our legal duties such as keeping tax records.

How long we keep it

File content is gone once the request ends. Daily counters are replaced the next day. Sign-in links expire after 15 minutes and sessions after 30 days. Account data stays until you ask us to delete it. Payment records are kept as long as tax law requires. Google Analytics keeps visit data for 2 months.

Your rights

You can ask for a copy of your data, a correction, or deletion of your account, and you can object to processing. Write to support@anyredact.app from the email address on your account. You can also complain to your local data protection authority.

Children

AnyRedact is not meant for children under 16. If you think a child has given us personal data, write to us and we will delete it.

Changes

We will post changes to this policy here and update the date below. If a change affects how your files are handled, we will also email account holders.

Last updated 27 October 2026