Privacy Policy
Last updated: 2026-05-12
Plain English, no fine-print games. We've kept this short and honest — if anything here is unclear, email [email protected] and we'll explain it.
What you give us
- Your photos. Each uploaded photo is stored on our infrastructure so we can detect the license plate and produce the blurred version.
- Your email address if you complete a purchase. Our payment processor collects it at checkout and forwards it to us so we can send the receipt and let you recover the batch on a different device.
- A signed cookie the size of a random token. It links your browser session to the batches you've started, so a refresh restores your work. No third-party trackers, no advertising IDs.
- Standard request metadata (IP address, user-agent string, timestamps) that any web server logs by default. We keep these for 30 days for abuse detection and operational debugging.
What we don't collect
- Photo content beyond plate detection. We don't run OCR on the rest of the image, we don't index faces, we don't build profiles.
- Location / GPS / EXIF. We strip identifying metadata from the rendered output. The original you uploaded still has it until the photo is deleted (see retention).
- Cross-site tracking. No Facebook Pixel, no Google Analytics with default settings, no behavioural ad SDKs.
Who we share with
We share your information with third-party service providers who help us provide and support blurmyplate. We only share what's necessary for them to complete their service, and we require them to use it in a manner consistent with this policy. Examples include hosting and content-delivery, transactional email, and payment-processing services.
We do not sell your personal data, and we don't share it with advertisers, data brokers, or analytics resellers.
Retention
- Uploaded + rendered photos are auto-deleted 30 days after upload. This is enforced by a daily cleanup job, not a manual sweep.
- Email + batch records for paid batches are kept indefinitely so you can recover past purchases — you can ask us to delete them any time (see Your rights).
- Request logs (IP, user-agent) are kept for 30 days.
Your rights
If you're in the EU, UK, California, or anywhere else with privacy-rights legislation, you have the right to:
- Request a copy of the data we hold for your email (a list of paid batches + their metadata).
- Ask us to delete your data. Photos are gone within 30 days regardless; email records are removed within 7 days of your request.
- Withdraw consent for processing — note this means we can't keep your past-purchase history; the act of deleting is the withdrawal.
Email [email protected] for any of the above. We aim to reply within 7 days.
Children
blurmyplate is not directed at children under 13 and we don't knowingly collect data from them.
Changes
If we materially change this policy we'll update the last_updated date at the top and, for anyone with an active paid batch, send a heads-up email to the address on the batch.