Privacy Policy

Last updated: July 16, 2026

Img ID ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we handle your information when you use our website (imageid.store) and mobile applications (collectively, the "Service").

1. Information We Collect

When you use Img ID, the following information may be collected or processed:

Images you upload or capture: Photos and images you choose to submit for analysis.
Image metadata (EXIF): Embedded metadata such as camera model, GPS coordinates, and date taken, which is extracted locally as part of the analysis.
Device and usage data: Page views, feature events, landing source, scanner type, request timing, browser/device details, and standard server logs such as IP address and user agent.
Anonymous product identifiers: Random visitor, session, and tab identifiers used to understand whether people return and where scans begin. These identifiers are not tied to an Img ID account.

We do not require an account or ask for your name, email address, or phone number to run a scan.

2. How We Use Your Images

Images you upload are used solely for the purpose of providing the analysis features of the Service, including AI detection, text extraction (OCR), component identification, and image description.

3. Third-Party AI Processing Services

To perform image analysis, your images are transmitted to third-party AI service providers. These providers process your images on our behalf to generate analysis results. The third-party services we use include:

Service Provider	Purpose	Terms or data policy
OpenRouter (OpenRouter, Inc.)	AI model routing and inference for image analysis (description, OCR, component detection, AI detection)	openrouter.ai/privacy
Underlying model providers	Vision models selected through our configured OpenRouter fallback list. Provider selection can change when a model fails or configuration changes.	OpenRouter model and provider details

Img ID also parses SHA-256, encoding facts, EXIF, and C2PA Content Credentials on our server from original upload before image optimization. Precise GPS is excluded from public share results. Reverse-search buttons never send image automatically; you choose whether to upload it to selected provider.

Important:

Your images are sent to these services to generate requested analysis results.
Third-party handling, retention, and training policies are governed by applicable provider terms and data policies.
We do not sell or share your images with any third party for marketing, advertising, or any purpose other than providing the analysis you requested.

4. Data Storage and Retention

Temporary storage: Images you upload are stored temporarily on our servers (hosted on Google Cloud) to enable sharing of analysis results via unique URLs.
No permanent storage: We do not permanently store your images. Uploaded images may be periodically purged.
Analysis results: Each completed scan is stored behind a random, unlisted result URL so sharing works immediately. This happens whether or not you open or send the link. Stored output can include descriptions, OCR text, AI verdict, components, metadata findings, and specialized product reports. Anyone with the link can view its contents until periodic deletion.
Recent scans on your device: Small thumbnails, verdicts, confidence values, and share codes are stored in browser local storage so you can reopen recent scans. You can remove each item in product or clear browser site data.

5. Camera and Photo Library Permissions

Our mobile apps may request access to your device's camera and photo library. These permissions are used solely to:

Allow you to take photos for immediate analysis.
Allow you to select existing photos from your library for analysis.

We do not access your camera or photo library without your explicit action, and we do not collect or store photos beyond those you choose to analyze.

6. Analytics and Local Storage

We use Google Analytics and Datadog for page, funnel, reliability, and performance measurement. We do not send uploaded image content or OCR text to these analytics systems. Img ID stores a random visitor identifier for up to 365 days, rotates its session identifier after 30 minutes of inactivity, and keeps a tab-level visit identifier until that browser tab session ends. Browser controls or clearing site data can remove these identifiers.

7. Data Security

All data transmitted between your device and our servers, and between our servers and third-party AI services, is encrypted using HTTPS/TLS. We use industry-standard security practices to protect your data.

8. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect information from children under 13.

9. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of changes by updating the "Last updated" date at the top of this page. You are advised to review this page periodically.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected].

Return to Img ID