Privacy policy

Who is responsible

Persimmon (RCS Chartres, SIREN 844 372 656) is the data controller. Our full publisher details are on the Legal notice page.

For any question about your data, or to exercise any right below, write to support@getunstamped.com.

Images you upload

An image is received, cleaned of removable metadata, and held only long enough for you to download the result. Both the source and the result are deleted automatically within 15 minutes, and the service also wipes its working directory when it starts and when it stops.

The legal basis is the performance of the service you asked for.

We never read your file's contents, its filename or any metadata we extracted from it into analytics, logs or e-mail. The cleaning report you see is produced for you, in your own session, and is deleted with the file.

The free allowance

The free cleaner allows a fixed number of successful downloads per network address per rolling 24 hours. To count them we store a keyed cryptographic digest of the address — never the address itself — in memory, for the length of that window. Attempts that fail cost you nothing.

The legal basis is our legitimate interest in offering a free tier without it being drained by automated abuse.

Accounts

If you create an account we store your e-mail address and a hash of your password — never the password. The legal basis is the contract you enter into by opening an account.

Account data is kept while the account is active. An account with no activity for 24 months is reviewed and deleted; where we are operationally able to, we write to you first.

You can ask us to delete your account at any time.

Pro reservations

Reserving Pro access records that your account asked to be told when checkout opens. It takes no card, no payment and no address. The legal basis is your consent, and you can withdraw it at any time.

A reservation is kept until you withdraw it or delete your account, and in any case no longer than 3 years after it was made or after the last message you sent us about it — whichever is later.

Support correspondence

Messages you send us are kept for no more than 2 years after the last exchange, so we can follow up and so we have a record if a dispute arises. The legal basis is our legitimate interest in handling and evidencing support requests.

Technical and security logs

The service keeps operational logs — errors, request outcomes, rate-limit decisions — for no more than 6 months, unless a documented security incident requires us to preserve a specific set for longer. The legal basis is our legitimate interest in keeping the service running and safe.

Measurement, and what we deliberately do not do

We record a closed, allow-listed set of first-party funnel events — a page was viewed, a file was selected, a clean succeeded, a download happened — and the campaign token from a link you followed, so we can tell which channel brought you. That is the whole of it.

No event ever carries an e-mail address, a raw network address, a filename, any metadata extracted from your image, a session token or a secret. The allow-list is enforced in code and asserted by tests, not by a policy somebody has to remember.

There is no Meta Pixel, no advertising tracker, no third-party analytics product and no cross-site profiling on this service.

Cookies

This service sets only the cookies it needs to work: a session cookie, a CSRF token, and a short-lived cookie carrying the campaign token from the link you arrived on. There is no advertising or profiling cookie, which is why you are not asked to consent to one.

Who else processes your data

Hetzner Online GmbH (Industriestrasse 25, 91710 Gunzenhausen, Germany) — hosting. Servers in Germany, inside the EU.

Coolify Cloud (Coolify B.V., Netherlands) — deployment and server administration.

Resend (Plus Five Five, Inc., United States) — delivery of transactional email: address confirmation, password reset and account security notices. Nothing else is sent through it.

Gandi SAS (France) — domain registration, DNS and the mailbox that receives messages sent to our support address.

Payment is not enabled on this service. No payment provider processes anything for us today, and none is listed here until it actually does.

Your rights

You have the right of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw a consent you gave. Write to support@getunstamped.com and we will answer within one month.

If you think we have handled your data badly, you can complain to the CNIL (cnil.fr), the French supervisory authority.