Privacy

Effective: 2026-04-27. v0.1 draft — see docs/privacy-draft.md.

What we collect

• The photos you submit for canclusion. We hash them, strip EXIF metadata, compress them, and store the result.
• An anonymous browser session ID (HTTP-only cookie) to associate your canclusions with you before signup.
• If you sign up, your email address (for OTP login) and any profile info you provide.

What we don't do

• We never train models on your images. Your photos are used to score your canclusion and to show it to you and (if public) others. Nothing else.
• We don't sell your data.
• We don't show third-party ads in the core canclude flow.

Image storage

Submitted photos are stored in our Supabase Storage bucket. Inconclusive uploads are automatically deleted after 24 hours. Soft-deleted canclusions are hard-deleted after 30 days.

Third parties

Photos transit Anthropic's API for scoring. Anthropic's data handling terms apply to that transit; we do not retain training rights with them on your behalf.

Reports and abuse

We commit to reviewing abuse reports within 24 hours. Confirmed CSAM is reported to NCMEC and the uploader is banned. We do not proactively scan all uploads at v1; this changes as volume grows.

Your rights

Email hello@canclude.com to delete your account or any canclusion.