Privacy

Accounts and payments

We store your login email, a salted password hash, a hashed recovery code and essential session cookies. Stripe receives your checkout details and processes payments; we store Stripe customer and subscription identifiers, payment event identifiers and usage records. We never store full card numbers. Account and saved-workspace routes are excluded from analytics. Results are saved privately only when you choose Save, and stay available after cancellation until you delete them. Original uploads are not saved in your workspace. Contact us to request account deletion; required billing records may be retained separately.

Uploads

Uploaded file bytes are used for the check and are not published by the receipt or case system.

Getting a prompt

When you choose Get prompt, we first look for a prompt saved in your image. If none is found and reconstruction is enabled, your image, text or code is sent to DeepSeek to create a similar prompt. Results may be held in server memory for up to ten minutes to avoid repeat calls. They are not added to public cases or receipts. A temporary cookie helps limit usage.

Image detection

When AI detection is enabled, images, submitted text or code, and extracted page text may be sent to DeepSeek or our configured detection provider for an estimate. Evaluation-only scores do not change your result. Content is not automatically used to train our models. Our provider integrations also include OpenAI origin checks when configured.

Chrome extension

The isGenAI Chrome extension sends nothing until you choose a check. It then sends the address of the image or page you picked to isGenAI, which fetches that public resource and checks it like a link check, including the detection described above. Extension checks are private by default and create a public receipt only when you turn on “Create a public report link”. The extension does not collect browsing history; its optional feed filter reads visible post text on supported social sites on your device and sends nothing to isGenAI. Settings are stored locally in your browser.

Public cases

Public case pages are about media, never people. They do not include crowd votes, creator scores or suspected-user lists.

Public pages

Only publicly reachable pages and files are fetched. Private networks, localhost and internal addresses are blocked.

Feedback on results

When you send feedback, we save your selected answers, the check ID, result category and content type, plus a task description only if you choose to add one. The optional note is limited to 500 characters; leave out personal details and confidential material. Your checked file, text, code, prompt and URL are not automatically included. A temporary essential cookie ties feedback to your check and limits repeated reports. We keep reports in a private review queue and remove reports older than 30 days during cleanup. Feedback helps us understand tasks and prioritize improvements. Task notes are not sent to analytics, added to public reports or used for model training. Submitting a note does not give permission to quote it publicly. Feedback does not automatically become a training label or change a public result.

Optional analytics

When optional analytics is enabled and you agree, we use Google Analytics to understand visits to our public information pages and whether checks and prompt requests succeed. Google receives the public page address without its query string or fragment, the referring site’s origin, a broad content type (file, link, text or code), outcome categories and request duration. We do not include uploaded files, filenames, submitted links, text, code, generated prompts, feedback task notes, content hashes or report identifiers in analytics events.

Google’s analytics tag loads only after you accept. It uses first-party cookies to distinguish visits and may process browser, device and network information, including an IP address during transmission. Advertising storage, Google signals and advertising personalization are disabled. Case, receipt, administration, workspace, search and other unapproved routes are excluded from our analytics events.

Your accept or reject choice is stored in your browser for 180 days. When analytics is configured, use Analytics settings on a public information page to change your choice. Rejecting stops future analytics collection on this site and removes accessible Google Analytics cookies; it does not delete information already received by Google. The checker works with analytics rejected. Learn more in Google’s privacy policy.