Privacy Policy

Last updated: [date]

This is a template, not legal advice. Have it reviewed by a professional before publishing, and fill in every [placeholder].

1. Who we are

This Privacy Policy explains how [your legal name / business name], based in [address, Italy] ("we", "us"), the data controller, handles information in connection with [site name / domain] (the "Service"). Contact: [privacy email].

2. The most important thing: your images

We never receive, see, store, or transmit the images you process. Background removal runs entirely inside your own browser using client-side AI (WebAssembly). No image data is ever sent to our servers or to any third party as part of using the tool. There is nothing for us to collect, because the file never leaves your device.

3. What we do collect

Data	Source	Why
Standard server/hosting logs (IP address, browser type, timestamp, pages visited)	Our hosting provider, [e.g. Netlify/Vercel/GitHub Pages]	Security, abuse prevention, basic operation — standard for any website
Font files	Google Fonts CDN	Page typography; Google may log the requesting IP address as part of serving the font
AI model & library files	Public CDN (esm.sh / jsDelivr)	Required to run background removal in your browser; the CDN may log the requesting IP address like any web request
Advertising cookies (if/when enabled)	Google AdSense	To display and measure ads that keep the Service free — see our Cookie Policy

4. Legal basis for processing

We process the technical data above on the basis of our legitimate interest in operating and securing the Service (Art. 6(1)(f) GDPR). Where advertising cookies require your consent (see Cookie Policy), we rely on your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.

5. Data retention

Images: not retained, ever — they are never received by us. Server logs: retained for [e.g. 30 days] and then deleted or anonymized. Cookie data: per the retention periods listed in our Cookie Policy.

6. International data transfers

Some third-party providers we rely on (e.g. Google, for fonts and — if enabled — advertising) may process data outside the European Economic Area, including in the United States. Where this occurs, it is based on the provider's own compliance mechanisms, such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses. See Google's own privacy documentation for details.

7. Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability, where applicable. To exercise these rights, contact us at [privacy email]. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or your local supervisory authority.

8. Children

The Service is not directed at children and we do not knowingly collect personal data from them beyond the minimal technical logs described above, which are not used to identify anyone.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top reflects the most recent revision.

10. Contact

[privacy email / postal address]