Privacy Policy
How MagicEraser Online collects, uses, stores, and protects account, payment, support, and uploaded image data.
Last updated: 2026-09-05
Introduction
We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service.
Information We Collect
We collect the following types of information to provide and improve our service:
- Account Information — Your name, email address, and other details you provide when creating an account.
- Usage Data — Information about how you interact with the service, including features accessed, frequency of use, and interaction patterns.
- Device Information — Device type, operating system, and browser type, used to optimize compatibility and performance.
- Cookies — Small data files stored on your device to remember preferences and improve your experience.
- Payment Information — Billing details handled by trusted third-party payment processors. We do not store full card numbers on our servers.
- Image Processing Data — Photos, masks, and generated results that you submit to perform an edit.
Image Storage and AI Processing
Anonymous originals, masks, and results are stored temporarily in Cloudflare R2 and are intended to be automatically deleted within 72 hours. Images are sent to our configured AI processing provider only to complete the edit you request. We do not use uploaded images to create a permanent public gallery. Download your result before the temporary retention period ends.
How We Use Your Information
We use the data we collect to:
- Provide, maintain, and improve the service.
- Process transactions and send related confirmations.
- Send technical notices, security alerts, and support messages.
- Respond to your questions, feedback, and support requests.
- Detect, prevent, and address fraud and abuse.
Product Analytics
We use first-party events to understand acquisition channels, page visits and editing workflows. When analytics is enabled, a random browser visitor identifier is stored for up to 90 days, and an activity session expires after 30 minutes of inactivity. First-party cookies allow server-side registration and checkout attribution. Database records use HMAC-pseudonymous visitor, browser-session and editor-session identifiers. We record sanitized page paths, language, coarse device/browser/system categories, campaign labels and referring domains, and visible-page active time. Full query strings, fragments, raw IP addresses, full user-agent strings, uploaded images, filenames, object keys, email addresses and free-form metadata are excluded from event records.
When you register or sign in, the visitor/session may be linked to your account for conversion reporting. Account switching is recorded separately; shared-browser activity is not merged into one account. Checkout records retain first-source and last non-direct source attribution, with a 30-day last-source window. Administrators can inspect visitor/session activity. Raw events and activity links are retained for 90 days; UTC daily aggregates and minimized order attribution are retained for up to 730 days. Financial order records follow the separate retention requirements above. Google Analytics and Plausible may also be enabled for traffic analysis.
Analytics is enabled by default, respects your browser's Do Not Track setting, and can be disabled below. This preference applies to first-party product analytics, Google Analytics, and Plausible on this device.
Product analytics is enabled on this device.
Data Sharing
We do not sell your personal information. We may share data only in these limited cases:
- With service providers who help us operate the service, under confidentiality agreements.
- To comply with legal obligations or respond to lawful requests from public authorities.
- To protect our rights, property, or safety, or that of our users.
Data Security
We implement industry-standard security measures including encryption in transit, access controls, and regular reviews. No method of transmission over the Internet is 100% secure, but we work continuously to protect your information.
Your Rights
You have the right to access, update, export, or delete your personal information. You can do this through your account settings or by contacting us at the email address below.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the date at the top of this page and, where appropriate, sending a notice through the service.