POLICY SHEET / 2026-08-28

Privacy.

The scanner is local by design. Your camera files, metadata, hashes, and reports do not leave your computer.

CLI data

The CLI reads the folder you name and writes only the report destination you request. It does not use telemetry, analytics, crash reporting, accounts, or network requests. Symlinks are not followed. GPS presence is reported, but coordinates are omitted unless you pass --include-gps.

Website data

The website demo uses fixed sample records and cannot select or upload your files. The site has no advertising or behavioral analytics. Basic infrastructure logs may record an IP address, user agent, requested path, and time for security and reliability, and are retained only as needed by the hosting operator.

License data

If you buy or restore the migration set, your license token and most recent verification result are stored in your browser’s local storage. Verification sends that token to Sociobot’s billing API at most once per day. Checkout and refunds are handled by Sociobot/Dodo as merchant of record under their transaction policies.

Your controls

You can remove the token with “Forget license on this device” or by clearing site storage. You control every report file and can delete it normally. Avoid --include-gps for reports you plan to share.

Contact

For privacy questions, open an issue in the project repository.