Privacy policy
Updated 2026-11-04
The short version: the text and files you check never leave your device. We keep only what is needed for the free limit, payments and sign-in.
Who is responsible
The controller of personal data for removeaitraces.com is Remove AI Traces, —. Contact: [email protected].
Your text and files
Checking, highlighting and cleaning run in your browser. The text you paste, the files you upload, their names and the traces found in them are not sent to our server, to analytics or to anyone else. When you remove invisible characters for free, the server receives one number — how many characters were removed — or, for a document, the fact that one free document was used.
Data we process
| Data | Why | Kept for |
|---|---|---|
| Free-limit record: two one-way hashes (of a random cookie, and of your network address with the browser family) and today’s counters. The address itself is not stored | To apply the daily free limit | Deleted after 60 days without visits |
| Email address, language, Paddle customer ID | Your account after a purchase, sign-in links, receipts-related messages | While the account exists, then as required by law |
| Purchases: plan, amount, currency, country, Paddle transaction and subscription IDs, access periods, and which page you landed on, which tool you used and where you opened checkout | Giving and checking Pro access, refunds, accounting, understanding which tool leads to a purchase | As required by tax and accounting law |
| Anonymous usage counters: a day, an event name (for example “text checked” or “checkout opened”), page, tool (text or document), landing page and language, with a number. No identifier, no text, no file names | Understanding which tools are used and which pages lead to purchases | Up to 400 days |
| Sign-in link records (only a hash of the link) | One-time sign-in | Up to 7 days after the link expires |
| Email history: which offer email was sent for which purchase | Not sending the same email twice | While the account exists |
| Server logs kept by our hosting provider (IP address, browser, time, page) | Security and fixing errors | A short period set by the hosting provider, usually up to 30 days |
The usage counters above are our own and contain nothing that identifies you. We don’t use third-party analytics, advertising trackers or session recording on the scanner. If your browser sends Do Not Track or Global Privacy Control, no usage events are sent.
Cookies
rat_gid— a random identifier for the free daily limit, 1 year.rat_session— keeps you signed in after a purchase or a sign-in link, 1 year or until you sign out.rat_entry— not a cookie but browser tab storage (sessionStorage): remembers which page of the site you landed on, to attribute a purchase. It is cleared when you close the tab and is not set if Do Not Track or Global Privacy Control is on.
Both are strictly necessary for the service. Paddle sets its own cookies inside the checkout window under its own policy.
Emails
After a purchase we send a sign-in link and receipts-related messages. Shortly after a Day pass ends we may send one email about Pro Monthly; every such email has a one-click unsubscribe link. Sign-in links and receipts keep coming after you unsubscribe.
Who helps us
- Paddle (Paddle.com Market Ltd and affiliates) — merchant of record: payments, taxes, invoices, refunds. Paddle processes your payment details; we never see your card.
- Resend — delivery of our emails.
- Our hosting provider and Cloudflare — hosting, content delivery and protection against attacks.
- Telegram — internal sale notifications to the operator: plan, amount and a masked email (for example a***@example.com).
They process data only to provide these services. Some of them may process data outside your country under appropriate safeguards such as standard contractual clauses.
Legal bases
Performance of a contract (your account and purchases), legitimate interests (free-limit protection, security, the occasional offer email that you can switch off at any time) and legal obligations (tax and accounting records).
Your rights
You can ask to see, correct, export or delete your data, object to processing and complain to your data protection authority. Write to [email protected]; we answer within 30 days. Deleting an account ends Pro access; records that the law requires us to keep are kept until the required period ends.
Children
The service is not intended for children under 16, and we don’t knowingly collect their data.
Changes
If this policy changes, the date at the top changes too. For significant changes affecting customers, we will email them in advance.