1. Scope and who we are
This Policy explains how the online service operating under the trade name Matcha Filter Remover (the “Service”, “we”, “us”) processes information. Matcha Filter Remover is a service name, not a representation that a company with that name has been incorporated.
The Service is intended for adults. Privacy questions and requests can be sent to support@matchafilterremover.net.
2. Information we process
- Photos and processing data: the image you select for AI processing, a temporary normalized copy, the generated result, image dimensions and file type, your selected correction option, automated safety decisions, processing status, and random reference numbers.
- Account data: a stable identifier supplied by Google, your verified email address, display name, profile picture when supplied, and first and most recent sign-in timestamps. We keep these in a private account profile to operate your account, credits, payment support, and security controls.
- Service and security data: temporary browser and device identifiers, limited device and network signals, timestamps, consent records, usage limits, abuse-prevention records, and error information that does not include your photo.
- Payment and credit data: purchase reference, product, amount, currency, credit balance, refund, dispute, and payment-confirmation records from the payment provider shown at checkout. We do not receive or store full payment-card details.
- Support data: your email address, message, reference number, and information reasonably needed to answer you. Do not email photos, passwords, full payment-card details, or other unnecessary sensitive information.
3. How each correction mode handles your photo
- Low and Medium: the file check and color correction run locally in your browser. The photo is not sent to our servers.
- High / AI: after the local file check and your acknowledgements, a normalized copy is sent to private storage under a random reference. The original filename and embedded location or camera metadata are not kept in the application record.
- For AI processing, the normalized image and a constrained restoration instruction are sent to fal.ai, which runs the selected image model. fal.ai may process input, output, network, and usage data under its applicable terms and privacy documentation.
- AI inputs are sent to a specialized safety processor before generation, and generated results are checked again before they can be stored for display or download. A failed safety check blocks the image from processing or delivery.
- The result is returned to private storage and is available only through your current authorized session. We do not operate a public gallery.
4. Why we use information
- Provide, validate, secure, troubleshoot, and delete the correction you request.
- Authenticate users, show credit balances, enforce free-use and paid entitlements, and prevent fraud or automated abuse.
- Process purchases, refunds, disputes, and accounting records when checkout is enabled.
- Respond to support, privacy, copyright, and safety reports; comply with law; and protect users and the Service.
5. Service providers and disclosures
We use Cloudflare for website delivery, application data, and temporary private media; Google for sign-in; fal.ai for enabled AI image processing; and a specialized safety processor for automated input and output screening. Checkout uses the provider identified on the checkout page: Stripe acts as a payment processor for Stripe checkout, while Creem acts as Merchant of Record for Creem checkout. These providers process information under their own terms and may use subprocessors.
We may also disclose limited information when required by law, to address fraud or safety threats, to protect legal rights, or in connection with a business reorganization. We do not sell uploaded photos or use them in public examples or advertising.
6. Retention and deletion
- Normalized AI input: deleted immediately after a successful output; otherwise scheduled to expire within 60 minutes.
- Successful AI output: available for up to 24 hours, or deleted sooner when you use Delete now or Delete all.
- Incomplete processing history: normally shown for no more than 60 minutes. Minimal request, consent, credit, security, and deletion records may remain longer where needed for integrity, abuse prevention, accounting, or legal obligations.
- Google login session: expires after seven days unless you sign out sooner. Your account profile is retained while your account remains active and is deleted or minimized after a verified account-closure request, except for records we must retain for payment, fraud, security, or legal reasons. The device identifier used for free-AI controls may persist for up to one year; derived risk hashes are day-scoped.
- Payment, tax, fraud, refund, and dispute records: retained as required by the payment provider and applicable accounting, legal, or contractual obligations.
- Provider copies and logs are governed by the provider’s applicable service terms. Delete now removes Service access and our private media objects but cannot promise instantaneous deletion from every provider backup or legally required record.
- We may retain a minimized safety record—such as the job reference, check stage, decision, timestamp, and policy version—for abuse prevention, accounting, dispute handling, and legal compliance. This record does not contain a separately retained copy of the photo.
7. Cookies and analytics
We use strictly necessary, security-protected cookies to keep results private, support Google sign-in, and prevent abuse of free use. Blocking these cookies may prevent login, private history, or AI features from working.
We use Plausible and Ahrefs Web Analytics to understand aggregate visits without placing analytics cookies or using persistent visitor identifiers. They may receive limited technical information needed to produce aggregate statistics through their configured analytics endpoints.
Google Analytics 4 is optional and does not load until you select Allow analytics. If enabled, Google may use cookies or similar identifiers and receive information such as page URLs, browser and device details, approximate location derived from network information, and event timestamps. Advertising storage, advertising user data, and ad personalization remain disabled.
Microsoft Clarity is optional and does not load until you select Allow analytics. If enabled, Clarity may use cookies and collect page interactions, device and browser details, approximate location derived from network information, and session recordings so we can understand how visitors use the Service. Advertising storage remains disabled.
We store your analytics choice on your device for 180 days so the Service can respect it. Select Cookie settings in the footer to change or withdraw your choice at any time. Withdrawing consent stops future Google Analytics and Microsoft Clarity storage and asks those services to remove accessible analytics cookies for this site. We do not use the analytics services for advertising.
8. Your choices and rights
- Use Low or Medium to keep photo correction in your browser.
- Use Delete now or Delete all to remove available results and images, and sign out to end your login session on that browser.
- Email support@matchafilterremover.net to request access, correction, deletion, restriction, objection, or portability where applicable, or to close your account. We may need to verify the request without asking for the original photo.
- You may complain to your local data-protection authority. Rights and exceptions vary by location, and some payment, fraud, security, or legal records may need to be retained.
9. Children, security, and international processing
The Service is for users aged 18 or older and is not directed to children. Do not submit a minor’s image for face-focused processing. We use private object storage, owner-bound access, signed sessions, input validation, short media lifetimes, and limited logging, but no online service can guarantee absolute security.
Cloudflare, Google, fal.ai, our specialized safety processor, the checkout provider, and their subprocessors may process information outside your country. Data may therefore be subject to different laws and lawful government access.
10. Changes and contact
We may update this Policy as features, providers, or legal requirements change. The date above identifies the latest revision. Contact support@matchafilterremover.net with privacy questions or requests.
