Privacy

Last updated October 22, 2026

Your documents

Documents are opened, scanned and redacted inside your browser tab. They are not uploaded, and we do not receive their contents, names, text or any fingerprint of them. When you close the tab, they are gone.

What our server does receive

• Your email address, when you sign in with an email link, or the email address and account ID Google gives us when you use Google sign-in.
• A credit ledger: when credits were granted or used, and for each export only the page count, the time, your plan and whether it passed verification. No file names, no contents.
• A session cookie (__Host-session) that keeps you signed in for up to 30 days of activity. It is the only cookie we set.
• Temporary counters to limit abuse. They are keyed by a one-way hash of your network address or email, not the address itself, and are deleted shortly after.

What stays on your device

The export history on your account page (file names, dates and results) is kept in your browser’s local storage and is never sent to us. You can clear it on the account page.

What we do not use

No analytics, advertising trackers, third-party scripts, third-party fonts or session recording. You can confirm this in your browser’s Network tab.

Who else handles data

An email delivery provider sends your sign-in links, and Google handles Google sign-in if you choose it. If paid plans are enabled, a payment processor handles payment details; we store your plan and a payment reference, never card numbers.

Deleting your data

Delete your account on the account page. That removes your email, sign-in records, credit ledger and export records from our database immediately. Credits left on the account are forfeited.

Questions

Write to support@airgapredact.com.