Privacy Policy

1. Introduction

Welcome to remove-bg.io! This Privacy Policy explains how remove-bg.io (referred to as "we," "us," or "our") handles your personal data when you access our services. Transparency, security, and respect for your privacy are fundamental to us.

This policy applies to all interactions you have with our platform, including browsing, uploading images for processing, and using any features available at remove-bg.io.

2. Our Core Principles

• No Storage of Uploaded Images: Images uploaded to our platform are processed entirely in server memory (RAM) and are never written to disk. Processed results are returned to your browser immediately and are not retained on our servers.
• Data Minimization: We only collect the information necessary to deliver and improve our services.
• User Control: Since we do not require accounts and do not store your images on our servers, there is minimal personal data to manage. You can clear locally cached data (theme preferences, processed images) through your browser settings.
• Security: We prioritize securing your data with the latest technologies and methods to prevent unauthorized access.

3. Information We Collect

3.1 Information You Provide

The primary information you provide is the images you upload for background removal. We do not require account creation, and we do not collect names, email addresses, or payment information through the Service. If you contact us at support@remove-bg.io, we will receive whatever information you include in your message.

3.2 Automatically Collected Information

When you use our website, certain information is automatically collected:

• IP address: recorded in server access logs and used for rate limiting and Cloudflare Turnstile bot verification.
• Device and browser information: browser type, operating system, and language preferences, collected by Google Analytics 4.
• Usage analytics: anonymized events including file size, file type, processing duration, and error messages. We explicitly never send filenames or personally identifiable information to analytics.
• Geolocation: approximate location derived from IP address by analytics services (city-level accuracy).

3.3 Cookies and Client-Side Storage

We use the following cookies and client-side storage mechanisms:

• Google Analytics 4 cookies (_ga, _ga_*) to distinguish visitors and track sessions.
• Cloudflare Turnstile may set cookies for bot detection and verification.
• localStorage: stores your theme preference (light/dark mode), feature flag overrides, and UI state. This data never leaves your browser.
• IndexedDB: processed images (original and result) are cached locally in your browser for convenience, with a maximum of 20 images auto-deleted after 4 hours. This data never leaves your browser.
• sessionStorage: temporarily holds image data when navigating between pages within a single browser session. This data is automatically cleared when the session ends.
• Cache API: the browser-based AI model (~44 MB) is cached to avoid re-downloading on repeat visits.

We do not use advertising cookies or tracking pixels.

4. How We Use Your Information

The information we collect is used for:

• Providing the background removal service.
• Understanding usage patterns to improve service quality and performance.
• Enforcing rate limits and preventing abuse.
• Verifying that requests originate from human users (via Cloudflare Turnstile).
• Ensuring platform security and stability.
• Complying with legal obligations.

Our legal basis for processing is legitimate interest in providing and improving a free service, and, where applicable, your implicit consent to analytics cookies.

5. Data Sharing Practices

We do not sell, rent, or trade your personal data. Your information is shared only in the following scenarios:

• With trusted infrastructure providers: Cloudflare (hosting, CDN, security, API routing) and Google (anonymized analytics).
• jsDelivr CDN receives your IP address and browser information when delivering the ONNX Runtime library for browser-based processing.
• To comply with lawful requests from government or regulatory authorities.
• In connection with mergers, acquisitions, or asset sales, subject to confidentiality agreements.

Your uploaded images are never shared with any third party.

6. Security Measures

We use a combination of technical, administrative, and physical safeguards to protect your data. These include:

• Data encryption in transit via HTTPS/TLS for all connections between your browser, Cloudflare, and our backend.
• Cloudflare WAF, rate limiting, and bot protection to prevent abuse.
• Access controls to limit data access to authorized personnel only.

Images exist in server memory only during processing and are never written to persistent storage. No personal user data is stored on our servers beyond standard web server access logs. Despite these measures, no method of data transmission can be guaranteed as 100% secure.

7. Cookies and Tracking Technologies

Cookies are small files stored on your device to help us improve user experience. Here's how we use them:

• Functional storage (localStorage) for theme preferences and UI state.
• Analytics cookies (Google Analytics 4) for anonymized usage tracking.
• Security cookies (Cloudflare Turnstile) for bot verification.

You can manage cookies and local storage through your browser settings. Clearing site data will remove all locally stored preferences, cached images, and the cached AI model.

8. Your Rights

You have rights under applicable data protection laws, including:

• The right to access and rectify incorrect data.
• The right to request data deletion.
• The right to data portability and restriction of processing.
• The right to clear all locally stored data (localStorage, IndexedDB, cached model) through your browser settings.

To exercise these rights, contact us at support@remove-bg.io.

9. Changes to This Privacy Policy

This policy may be updated periodically. Major changes will be communicated through prominent notices on our website.

10. Contact Us

If you have questions about this Privacy Policy or data practices, reach out to us:

• Email: support@remove-bg.io
• Address: remove-bg.io, Bezawada, India

11. Third-Party Analytics, Security, and Performance Tools

We use a variety of third-party services and tools to analyze user behavior, improve performance, secure our platform, and enhance your overall experience. These include:

• Google Analytics 4 (GA4): Analyzes anonymized site traffic, user interactions, and usage patterns. Loaded via Google's gtag.js script. Events tracked include file size, file type, processing duration, and errors. Filenames and personally identifiable information are never sent.
• Cloudflare Turnstile: Invisible bot verification that ensures requests are made by human users, enhancing security and reducing abuse.
• Cloudflare (Pages, Tunnel, WAF, R2): Provides frontend hosting, secure API routing, web application firewall protection, rate limiting, and AI model file hosting.
• jsDelivr CDN: Delivers the ONNX Runtime Web library used for browser-based fallback image processing.

When our server-based API is unavailable, the Service may process images entirely within your browser using an AI model (U2-Net). The model is downloaded once from Cloudflare R2 and cached in your browser's Cache API. In this mode, your image never leaves your device.

These third-party providers may collect certain information from your browser or device, such as IP address, browser type, operating system, and user interaction data. Their handling of this data is governed by their own privacy policies, which we encourage you to review.

By using remove-bg.io, you consent to the data collection and processing by these third-party tools in accordance with their respective policies. If you wish to opt out of certain data collection activities, you can manage your preferences through browser or device settings, or by following the instructions provided in the respective tool's documentation.