Privacy Policy

1. Overview

MetaScrub is a privacy-first tool. We are designed to help you remove metadata from files, not to collect data about you. The information we handle is limited to what is strictly necessary to operate the Service securely.

2. Information We Collect

We collect only the following:

• Email address — only if you choose to create an account or contact support. We use this to send login links and respond to enquiries.
• API keys — generated by you and stored against your account so you can manage them. Treat them as passwords.
• IP address and basic browser/device information — collected automatically by our server logs and used to operate, secure, and troubleshoot the Service.
• Uploaded files — processed in memory for the sole purpose of metadata removal, then automatically deleted within approximately one hour. Files are never read for any other purpose, never sold, and never shared with third parties.
• Basic usage analytics — aggregate page-view and usage data to understand how the Service is used and where to improve it. This data does not identify individual users.

We do not collect payment card details, banking information, or any financial data. The Service is free and has no payment system.

3. How We Use Information

We use the information we collect to:

• Operate, maintain, and improve the Service.
• Authenticate account holders and manage API key access.
• Protect the Service against abuse, spam, and unauthorised use.
• Respond to support requests.
• Comply with applicable legal obligations.

We do not sell or share your personal information with advertisers or data brokers.

4. File Handling & Retention

Uploaded files are processed entirely on our servers and then automatically deleted within approximately one hour of upload. They are never stored permanently, never analysed beyond the metadata-removal operation, and never shared with any third party.

Account data (email address, API keys) is retained for as long as your account exists. You can request deletion at any time.

Server and security logs are retained for approximately 30 days and then purged.

5. Data Security

We use HTTPS encryption for all data in transit. Access to our systems is restricted to authorised personnel. We apply industry-standard security practices to protect data against unauthorised access, loss, or disclosure. No system is perfectly secure, but we take reasonable precautions appropriate to the nature of the data we hold.

6. Cookies & Analytics

We use a small number of essential cookies required for the Service to function (for example, to maintain your login session). We may also use privacy-respecting analytics to understand aggregate usage patterns. We do not use third-party advertising cookies or tracking pixels.

7. Third-Party Services

The Service is hosted on infrastructure provided by third-party cloud and hosting providers. These providers may process IP addresses and request metadata as part of normal service delivery. We do not use payment processors, advertising networks, or data brokers.

8. Your Rights

Depending on your location, you may have the right to access, correct, delete, export, or restrict the processing of your personal data, or to object to certain uses. To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable time and in accordance with applicable law.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the most recent revision. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.

10. Contact

Questions or concerns about this Privacy Policy? Email us at [email protected].