Privacy policy

Who is responsible

Seewrite (seewrite.org) is an independent service based in Morocco. We are the "controller" of the personal data described here. For any privacy question or request, email hello@seewrite.org.

Images and text you submit

• Upload. Your browser shrinks the image to at most 768 pixels on its longest side, then sends it over an encrypted connection (HTTPS) to our server. The server passes it to an AI model on Cloudflare Workers AI and sends the text back to you.
• Not stored. We don't save the image or the text, and neither appears in our logs. Cloudflare lists the model we use as having zero data retention.
• Text you type. Some tools take typed text, such as an idea, a prompt, a focus keyword or details about the page an image is for. It is sent over HTTPS to our server and passed to the same AI model, together with your image if you added one. We don't save it, and it doesn't appear in our logs.
• Image links. If you paste a link instead of uploading, our server downloads that image from the link, checks that it is an image, and passes it straight to your browser. We don't keep the image or the link.
• What you can upload. Please don't submit images containing other people's private information. See our terms of use.

Abuse and cost limits

The tools are free, so we limit how much they can be used (5 tries a day per device, up to 20 per network) and protect them from bots. To do that:

• Device cookie. The first time you press Generate, our server sets one cookie, __Host-itp_dev, holding a random code. It lets us count your free tries on this device and remember whether this device has already had its one-time sign-in bonus. It lasts up to 400 days, can't be read by scripts on the page, and isn't shared with anyone. Because the free limit can't work fairly without it, it doesn't need your consent.
• Daily counting codes. We combine that device code, and separately your network address (your IP address, or the network part of an IPv6 address), with the date and a secret key. We keep only the resulting codes with a count of your tries that day. They change every day and can't be turned back into your device code or IP address. We never store the IP address itself. The codes are deleted after three days at most. For the sign-in bonus we also keep one fixed code made from the device code (not the code itself), so the bonus can only be claimed once per device.
• Bot check. Before generating, the page runs Cloudflare Turnstile, which looks at signals from your browser to tell people from bots. Cloudflare processes that data under its own Turnstile privacy addendum.
• Totals. We keep daily totals (number of results, errors, blocked requests), and daily counts of tool actions per page: image added, result generated, result copied, upgrade clicked. They contain nothing about any one visitor: no cookie, ID, IP address, image or text.

Accounts (optional)

You can use every tool without an account. If you sign in:

• What we keep. Your email address; your name, if you sign in with Google; the date you joined; how many tries you've used (per day for free use, per month on a paid plan); and, on a paid plan, which plan you have, its status and renewal date. Not your Google password, and never your card details.
• Signing in with Google. Google tells us your email address, name and a Google account number. We don't get access to anything else in your Google account.
• Sign-in cookies. __Host-itp_s keeps you signed in for 30 days (it can't be read by scripts, and we store only a scrambled copy). itp_auth and itp_noads only tell the page that you're signed in or on a paid plan, so it can show your account and skip ads. These are needed for the account to work, so they don't need consent. Signing out removes them.
• Paid plans. Payments are handled by Lemon Squeezy, our reseller (merchant of record). They collect your payment details, billing address and tax information under their own privacy policy, and tell us only your plan, its status and dates. Checkout is in test mode at the moment, so no real payments are taken.
• How long. Until you delete your account. You can do that any time on the account page; it removes your email, sessions and usage counts at once. Billing records are kept by Lemon Squeezy for as long as tax law requires.

Feedback and contact

• The feedback form. We receive the type you chose, your message, the page you came from, and your email address only if you give it. The text is stored in our database for 180 days so we can follow up, then deleted automatically. It is also emailed to our inbox, where we keep it as long as needed to handle your request.
• Screenshots. Your browser shrinks them and removes hidden data such as location (EXIF). Our server checks they are PNG, JPG or WEBP images and attaches them to that email. They are not saved on our servers or in our database.
• Abuse protection. The form uses the same bot check and daily counting codes as the tools (see above), to limit how many messages one person can send.
• Email. If you email hello@seewrite.org, the message is forwarded to our inbox by Cloudflare Email Routing.

Server logs

Each request to the generator writes one log line with technical details only: whether it worked, how long it took, the tool, format, settings and language you chose, the size of the resized image, and the number of characters you typed. It contains no IP address, image, link, typed text or generated text. Like any website, our hosting provider, Cloudflare, sees your IP address in order to deliver the pages to you.

Stored in your browser

These items are saved in your browser's local storage. They stay on your device, are never sent to us, and are not cookies.

Analytics

To learn how many people visit and which pages and tools help them, we use the analytics tools below. No analytics cookies are set until you click "Accept" in the banner, and you can change your mind any time with "Cookie settings" at the bottom of any page.

• Cloudflare Web Analytics counts page views and page speed. It sets no cookies and builds no profile. More.
• Google Analytics 4 measures visits, pages and clicks. It runs in Google's Consent Mode: before you accept, it sets no cookies and sends Google only cookieless signals (such as that a page was viewed), which can't recognise you on a later visit. If you accept, it uses cookies (_ga, _ga_*, up to 2 years) to tell new visits from returning ones. We turned off Google signals and ad personalisation, and we send page addresses without query strings. How Google uses this data.
• Microsoft Clarity loads only if you accept. It records how pages are used (clicks, scrolling and replays of the page layout) using cookies (_clck, _clsk, up to 1 year). The tool areas and the feedback form are masked, so their text is never recorded, and uploaded images exist only inside your browser, so they can't be captured. Microsoft's privacy statement.

These tools never receive your images, the text you type or the results.

Advertising

Ads keep the tools free. They are provided by Google AdSense.

• Cookies. Google and its partners, the third-party vendors, use cookies and similar technologies to show ads and measure them. That can include ads based on your earlier visits to this and other websites.
• Consent. If you visit from the European Economic Area, the UK or Switzerland, Google shows a consent message before any cookies are used for ads. If you don't consent, you may still see ads that are not personalised. In some US states, Google may show a message that lets you opt out of the "sale" or "sharing" of your data for ads.
• Change your choice. Use the "Cookie settings" link at the bottom of any page.
• Opt out. You can turn off personalised ads from Google in My Ad Center. You can opt out of many other vendors' cookies for ads at aboutads.info or youronlinechoices.eu.
• Learn more. Read how Google uses information from sites that use its services.

Google is responsible for its own processing. We don't receive any data from Google that identifies you.

Who else receives data

• Cloudflare, Inc. Hosting, the AI model (Cloudflare Workers AI), the bot check, email forwarding and the feedback email, visitor statistics, and the database that holds accounts and feedback. Cloudflare acts as our service provider. See its privacy policy.
• Google LLC (Gmail): our inbox, which receives feedback messages, their screenshots and emails you send us.
• Google LLC: Google Analytics (cookies only with your consent).
• Microsoft Corporation: Microsoft Clarity, only with your consent.
• Google LLC: "Sign in with Google", if you choose it. See Google's privacy policy.
• Lemon Squeezy: payments for paid plans, as our merchant of record. See Lemon Squeezy's privacy policy.
• Google LLC and its ad partners: advertising, as described above. See Google's privacy policy.

These companies may process data in the United States and other countries. They protect transfers out of Europe with the safeguards the law requires, such as the European Commission's Standard Contractual Clauses. We don't sell your personal data to anyone.

Why we're allowed to do this

For visitors covered by European data protection law (GDPR and UK GDPR):

• Running the tools (processing your image and returning text): to provide the service you asked for.
• Your account and paid plan: to provide the account and the plan you signed up for (a contract with you).
• Limits, bot checks and logs: our legitimate interest in keeping a free service available and stopping abuse.
• Feedback: our legitimate interest in answering you and improving the tools.
• Analytics cookies and Microsoft Clarity: your consent, which you can withdraw at any time with "Cookie settings".
• Cookieless visit counts (Cloudflare Web Analytics, and Google Analytics before you accept): our legitimate interest in knowing how many people use the site. They set no cookies and can't recognise you on a later visit.
• Cookies for ads: your consent, which you can withdraw at any time with "Cookie settings".

How long we keep data

Your rights

Depending on where you live, you can ask to see, correct or delete personal data about you, object to how it's used, or ask us to limit it. If you have an account, you can see your data and delete it yourself on the account page. Without an account, we usually hold nothing we can link to you, because we don’t store images, results or IP addresses. Email us anyway and we'll tell you what we hold. You can also complain to your local data protection authority.

For data Google collects through ads, you can also use My Ad Center or contact Google directly.

Children

The site isn't meant for children under 13, or under 16 in the European Economic Area, and we don't knowingly collect their data.

Changes to this policy

If we change how data is handled, we'll update this page and the date at the top before the change takes effect.