A little clarity for every image

Privacy Policy

Read how CheckImageDPI handles image files, browser storage, usage data and information provided when contacting us.

This policy explains how CheckImageDPI handles local image work, online processing, Google sign-in, support and optional analytics. The processing notice on each tool identifies when a file leaves your browser. New payments are currently unavailable. Updated September 17, 2026.

Who to contact

CheckImageDPI is maintained by Carl AI Lab. Send questions about data access, correction, deletion or this policy to support@checkimagedpi.com. We may need enough information to verify that a request concerns your account or data before acting.

Local image processing and browser storage

The local DPI, conversion, calculation and metadata workflows process their working data in your browser. A local image may remain in browser storage to support returning to a result. Results expire after 24 hours. Expired files are cleared while the site is open or on your next visit; a closed browser cannot run this cleanup. Use Clear local image or your browser’s site-data controls to remove the local working copy. A file you download remains under your control until you delete it.

The local-processing statement does not apply to a hosted API request or an AI check that explicitly sends an image to a service. Choosing an online action changes the data flow; review that notice before continuing.

Online image processing and retention

When you explicitly request CommFor analysis, we receive the input needed for that task, an account or task identifier and operational information such as status and timing. Temporary inputs are deleted after processing and retained for no longer than one hour. Previously generated downloadable outputs expire after 24 hours. Download links have a ten-minute validity period and require the appropriate access.

Paid reports without the original image or prompts are retained for up to 30 days, and usage metadata for up to 90 days. You can delete your own available reports or files earlier. Expiration and deletion do not remove copies you have already downloaded or shared. Payment records are kept separately where needed for accounting, disputes and legal obligations.

Local evidence and optional CommFor processing

Phase 1 inspects the selected image entirely in your browser, including supported metadata, embedded provenance and public watermark signals. It is unlimited without registration and does not upload image bytes. Fetching site scripts, WASM or versioned trust resources does not submit your image.

Only an explicit optional CommFor action uploads the selected image to our hosted model service for an AI-generated score at 1 credit. The inference service does not write original images to disk; short-lived idempotency results can remain. Temporary upload storage and report retention follow the rules above. OpenAI API and Hive submissions are paused. We do not start model analysis automatically when local evidence is missing or incomplete.

Accounts, sign-in and security

When you sign in with Google, Google supplies the account identifiers and approved profile information needed for sign-in, which may include an email address and name. We store account, session and linked-credential information to manage access and prevent misuse. Google is the only supported social sign-in provider. We do not ask for your Google password.

Passkey sign-in uses a public-key credential. Your authenticator handles its private key and any local biometric verification; the site does not receive a fingerprint or face scan. API keys are displayed in full only when created, with a protected verifier used for subsequent authentication. To prevent repeated free-credit claims, FingerprintJS computes a browser identifier locally. We receive that identifier, not the raw browser attributes, and hash it again on the server. A shared identifier or IP limit can prevent a promotional gift without preventing sign-in. Security and abuse records are separate from optional marketing attribution.

Payment availability and credit records

New payments, subscriptions and self-service refunds are currently unavailable. PayPal is the planned payment provider; no PayPal checkout is offered until its payment flow and policies are ready. CheckImageDPI does not collect card details on these pages.

Account balances and usage records remain separate from payment availability. A displayed plan is not a completed order, and a browser return cannot prove that credits were purchased. Before payments open, the pricing and privacy information will identify the actual payment data flow, confirmation and retention rules.

Optional analytics and your choice

Optional analytics start disabled. We automatically show the analytics choice to visitors in the European Economic Area, the United Kingdom and Switzerland. Other visitors, including those whose region is unavailable, receive no automatic prompt. Anyone can open Privacy settings in the footer to accept, reject or withdraw consent. Closing the prompt does not grant consent. Local tool access does not depend on this choice.

We use Cloudflare’s request country to decide whether to show the prompt. The consent configuration returns only a region category, not your country or IP address. This is separate from the security records needed to run the service. Until you accept, this site does not load Google Analytics, Cloudflare Web Analytics or Microsoft Clarity, or create optional analytics and attribution cookies. Google Consent Mode starts with analytics and advertising storage denied. Accepting enables analytics; advertising storage and personalization remain denied.

After you accept, Google Analytics measures public pages, tool actions, first use, checkout starts and confirmed registrations or purchases. Purchase reporting includes a pseudonymous transaction reference, plan identifier, currency and amount, not card details or account email. Cloudflare Web Analytics measures page performance and usage. Microsoft Clarity provides heatmaps and session replay only on guides, About and Pricing; it is excluded from tool, result and account pages. These services may also process connection, device and browser information under their own policies.

We exclude image contents, image metadata, prompts, API keys, private download URLs and URL query parameters from the analytics events we construct. Consented attribution records the first permitted utm_source value, otherwise an external referring hostname or direct, for up to 30 days. It can be associated with activity and an account to compare channels with actual business outcomes. This site’s event records are retained for up to 90 days; provider retention is configured separately in their dashboards.

Your choice is remembered on this browser where storage is available. Use Privacy settings to withdraw it. We stop optional collection and remove accessible analytics cookies; withdrawal does not itself erase data already received by a provider. Browser or network blocking may prevent analytics delivery, and an analytics failure must not make a successful tool operation fail.

Support and newsletter email

Support messages are handled through the support mailbox, using Lark. Support and applicable transactional or newsletter delivery use Lark only. We use the address and message information needed to respond or deliver the requested communication. Newsletter consent is separate from signing up for an account or making a purchase.

Newsletter registration requires confirmation. You can unsubscribe through the message link. A confirmed permanent recipient-address rejection can stop future newsletter delivery. You can also contact support to report a complaint and request that delivery stop. Acceptance by the SMTP server does not confirm arrival in your inbox. This delivery setup does not receive automatic asynchronous bounce or complaint notifications. Unsubscribing does not cancel your account or prevent necessary transactional communications.

Sharing, rights and changes

Review a report before downloading or sharing it, especially when you choose to include GPS, prompts or other private fields. Local export or device sharing sends the content to the recipient or app you select; those copies are outside the site’s deletion controls.

Depending on your location and the applicable law, you may have rights concerning access, correction, deletion, restriction or objection. Contact support with your request. We will explain any information that must remain for security, billing or legal reasons. We may update this policy when the service’s actual processing changes, with the current date shown above.