Last Updated: September 21, 2026
For supported images, we receive the image file when needed for metadata verification or AI analysis, its full source URL, SHA-256 fingerprint, file size, and analysis results. A video-frame scan sends the frame you select. Full image URLs can contain identifiers or access tokens and can reveal the source website. We do not describe this information as anonymous browsing data.
We store a random install ID in Chrome storage to enforce the 30-day/2,000-scan free trial and verify premium access. A secret installation credential links requests to the same trial even if the visible ID changes; our database stores a one-way hash of that credential. On activation, we record the ID, your IP address, browser user agent, and consent version. Chrome may sync the install ID, installation credential, usage counters, site preferences, and ExtensionPay account data between browsers signed into your Chrome account. When you disable scanning on a site, its domain is sent as a compatibility report. Temporary pause does not submit a site report.
If you submit a correction, we receive the email address you enter, your comments, the image fingerprint, your proposed correction, and your IP address for abuse prevention. We do not read your Chrome profile email. Authorized reviewers may inspect the image and feedback you submit. An unverified report does not itself establish that an image is real or generated by AI.
We use these records to analyze images, reuse cached results, show service statistics, investigate incorrect results, maintain source and scan history, investigate and protect against suspected fraud, impersonation, or abuse, and improve this same image-detection service. Our database retains image URLs, fingerprints, filenames, results, analysis reasons, metadata/category tags, model information, and scan history. Consent, subscription, and correction records are retained separately.
Most image bytes are processed in memory. Where the training-storage feature is configured, images with corrected verdicts may be fetched again from their stored URLs and retained in private object storage as a labeled dataset to improve detection. This means we do not promise that all raw image bytes are deleted after every analysis.
Analysis and history records are retained for ongoing cache, review, and detection purposes; there is currently no automatic expiration period. You may request access or deletion using the contact details below. Backups and third-party processing are subject to the relevant providers' retention arrangements. Uninstalling the extension stops future collection but does not automatically erase existing server records.
We do not sell or transfer extension user data for advertising, credit decisions, data brokerage, or unrelated purposes. Any published trend statistics must be aggregated so they do not reveal individual users, image URLs, private images, or browsing activity.
Trustif.ai may share relevant images, analysis results, and source URLs with affected image owners, rights holders, or their authorized teams, including business customers, when necessary to investigate and protect against suspected fraud, impersonation, or abuse. Sharing is limited to the records needed for that investigation.
We do not provide these recipients with the discovering extension user's name, account email, installation identifier, IP address, or subscription details as part of the investigation records. Images and source URLs can themselves contain personal information; we do not describe them as anonymous.
An AI-detection result is an estimate, not proof of fraud, infringement, or abuse. An owner's objection to an image's use does not by itself establish fraud or abuse.
Automatic scanning starts only after you accept the activation disclosure. You can temporarily pause it, disable it for individual sites, or uninstall the extension. These controls stop new work and cancel pending browser requests; processing already received by a server may finish. Sensitive-site filters are incomplete: disable scanning before opening private documents, accounts, or other content you do not want analyzed.
Data sent to our API and processing partners uses HTTPS. Stored URLs are used by backend features and must be treated as potentially sensitive, including when they contain signed access parameters. Administrative access is restricted. The extension asks our server to retrieve image URLs; that server verifies the destination is public and checks the downloaded image. It does not retrieve images through your private network.
The use and transfer of information received through the extension and Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use data to provide or improve the extension's single purpose of image AI detection and for permitted purposes such as necessary fraud or abuse protection, as described above. Humans may access user data only with explicit consent for specific data, for necessary security investigations or legal compliance, or as permitted for aggregated, anonymized internal operations.
The website accepts images you upload and processes them through the same analysis service. Website security cookies help prevent signup abuse. Basic website visit records may include the page, referrer, and a hashed IP address. Hashing is pseudonymization and does not guarantee anonymity. The website may load fonts from Google.
The Trustif.ai browser extension bundles the following third-party open-source library:
You own your data. You can:
Simply email us and we'll take care of it within 30 days. We respect all GDPR and CCPA rights regardless of where you live.
Have a concern? We are real people and happy to help.
Email: [email protected]