Privacy policy
Your image is yours.
MaskSnap is designed to do the sensitive work on your device. This policy explains the narrow cases where data can leave it.
Effective August 17, 2026
Local image processing
Uploading, pasting, scanning locally, drawing redactions, removing metadata, and exporting happen inside your browser. The original image is not sent to our server during this workflow. We do not create an account or store the image.
Optional AI review
The AI review is disabled until you complete the local scan, open the review, and give explicit consent. If you continue, MaskSnap sends extracted OCR text with temporary token IDs to our server, which forwards that text to Mistral for classification. The image and its coordinates remain in your browser. MaskSnap does not retain the provider response for later application use. Do not use AI review for active credentials or material you are not allowed to disclose.
Operational data
Our infrastructure may process an abbreviated or hashed network identifier, browser information, timestamps, request counts, and error diagnostics to prevent abuse and keep the service working. MaskSnap does not intentionally log image contents or AI prompt payloads.
Analytics and ads
MaskSnap uses PostHog in cookieless aggregate mode to understand page traffic, acquisition sources, and whether anonymous visitors complete broad product steps such as loading, scanning, and exporting. Session replay, automatic interaction capture, persistent browser identifiers, and person profiles are disabled. Analytics events do not intentionally include image data, filenames, OCR text, detected values, or redaction coordinates. Reported page URLs omit query strings and reported referrers are reduced to their origin. Browser Do Not Track preferences are respected.
Advertising may be supplied by Google AdSense after launch. If personalized advertising or nonessential cookies are introduced, the appropriate consent controls will be added before activation in affected regions.
Retention
Local image data remains under your browser control. Rate-limit records are short-lived and reset on a daily window. Infrastructure providers may keep security and abuse-prevention logs under their own published policies.
Your choices
You can use the core editor without the AI review, analytics account, or subscription. You can clear site data in your browser at any time. For a privacy question, use the contact form without attaching an image.
Changes
We may update this policy as the product and applicable requirements evolve. Material changes will be reflected by a new effective date on this page.