Privacy policy

Last updated 30 October 2026

In short: The remove and view tools clean JPEG, PNG and WebP images on your device. Images are uploaded only when a tool needs our server (HEIC and TIFF cleaning, the metadata editor and the geotagger) and are deleted right after, always within 30 minutes. Text in the AI text cleaner never leaves your device. We don't create accounts or sell data. We use Google Analytics to count visits.

This policy explains what CleanupAIMeta ("we") processes when you use cleanupaimeta.com.

Your images

JPEG, PNG and WebP

These are read and cleaned by code running in your browser. They are never sent to our server or anyone else, and we cannot see them.

HEIC and TIFF, the metadata editor and the geotagger

Browsers can't clean HEIC and TIFF files, and editing metadata safely needs ExifTool, so in these cases the image is sent over an encrypted (HTTPS) connection to our server. There:

  • The file is stored under a random name in a private folder that isn't accessible from the web.
  • Its metadata is read and shown to you, then changed or removed as you choose.
  • The original and the processed copy are deleted as soon as the processed copy is sent to you. Files you don't process are deleted automatically within 30 minutes.
  • We don't look at, copy, share, sell or use your images to train any AI model.

Text in the AI text cleaner

Cleaning runs entirely in your browser. The text you paste is never sent to our server or anyone else.

Maps and place search

The geotagger shows maps from OpenStreetMap and searches places with OpenStreetMap's Nominatim service. Your browser requests these directly, so OpenStreetMap receives your IP address, the map area you view and any place you search for, under the OpenStreetMap Foundation privacy policy. Your image is never sent to OpenStreetMap. "Use my location" asks your browser for your position, which is used only to fill in the coordinates on the page.

Technical data

  • Server logs. Like most websites, our server records requests: IP address, date and time, page requested, browser type and response code. We use these only to keep the site running and secure. They are deleted after 14 days.
  • Abuse protection. To limit how many images one visitor can upload in a short time, we store a one-way hash of your IP address, which can't be turned back into the address. It is deleted after 10 minutes.
  • Google Analytics. We use Google Analytics to see how many people visit, which pages they use and roughly where they come from. Your browser sends Google the pages you view, your browser and device type, and your IP address, which Google uses to estimate your country and city and doesn't store. Outside the EEA, UK and Switzerland it sets cookies to recognise returning visitors. In the EEA, UK and Switzerland it sets no cookies and only counts visits. Google never receives your images or text. Ad features and Google signals are turned off. You can block it with a browser extension or Google's opt-out add-on.

Cookies and advertising

The only cookies are Google Analytics cookies, described above and in the cookie policy. We don't currently show advertising.

If we add advertising, we'll update this policy and the cookie policy and ask for your consent where the law requires it.

Who processes data for us

Our hosting provider runs the server where HEIC and TIFF files are processed and logs are kept. If we use a content delivery network, it handles requests to the site on our behalf. Google provides Google Analytics; its data may be processed outside your country under Google's standard contractual clauses. These providers act on our instructions and may not use the data for their own purposes.

Legal basis

Where the GDPR or UK GDPR applies, we process uploaded images to provide the service you request (contract), and server logs and the hashed IP address for our legitimate interest in keeping the service secure. Visitor statistics are based on our legitimate interest in understanding how the site is used; in the EEA, UK and Switzerland they are collected without cookies.

Your rights

Depending on where you live, you may have the right to access, correct or delete personal data we hold, to object to processing, and to complain to your data protection authority. Because we keep almost nothing and can't link logs to a person, there is usually no data to return. To make a request, email hello@cleanupaimeta.com.

Children

The service is not aimed at children under 13, and we don't knowingly collect their data.

Changes

If we change how we handle data, we'll update this page and the date at the top.