PRIVACY POLICY

WHO WE ARE

Check.Tattoo ("we", "us") operates the website check.tattoo and its AI-powered tattoo preview and evaluation tools. This policy explains what data we collect, how we use it, and your rights. For questions, contact us at support@check.tattoo.

IMAGES: THE PREVIEW TOOL

Tattoo designs and body photos you use in the Preview tool are processed entirely in your browser. Background removal, placement and rendering all run locally on your device. These images are never uploaded, never stored, and nobody at Check.Tattoo can see them.

One thing does travel: the background-removal model. The first time you add a design, your browser downloads that model and its runtime (about 56 MB) from a content delivery network run by the library's maker, IMG.LY (staticimgly.com). The request carries no image, and the files are the same for everyone, but like any file download it shows that host your IP address and browser. The image itself is then processed on your device by that model.

Camera access is used only to capture a single frame at your request. The video stream is stopped and released as soon as you close the camera or leave the page.

IMAGES: THE CHECK TOOL

The Check tool works differently, and it matters that you know before you use it. To score a design we have to send it to an AI model, so if you upload an image there it does leave your device: your browser resizes it to 1024px and sends it to our analysis endpoint, which passes it to an AI model (Google's Gemini, reached through the Lovable AI gateway) to generate the report.

We do not store that image. It exists only for the duration of the request and is not written to any database — we operate no image storage at all. The model provider processes it to return the analysis; how long a provider keeps request data is governed by its own terms, which we do not control. We send none of your name, email or any account identifier with it; there is no account, and the only personal data we can ever hold is the optional email described below.

If you would rather nothing left your device, describe your design in words instead of uploading it. The text path produces a full report and sends no image — even if you uploaded one earlier and then switched to describing it, only your words are sent.

INFORMATION WE COLLECT

Less than most sites. There are no accounts, so there is no profile of you anywhere.

• Usage counts, ours. We record a counter row when a page loads and at a few points in the check flow: which page, how far into the wizard you got, whether a report was produced and its overall score, whether the paywall or the checkout was opened, whether a purchase completed, which Preview action you used (added a design, added your own photo, downloaded), and the utm_source if you arrived from a link carrying one. There is no cookie, no visitor id and no IP address in it, and the timestamp is rounded to the hour so two rows cannot be joined into one person's visit. It is a tally, not a record of you — which is also why it can tell us that four in a hundred people bought, and never which four. We honour Do Not Track and Global Privacy Control, and a content blocker stops it.
• Platform analytics. We run no third-party analytics — no Google Analytics, no advertising pixels. The platform that hosts this site does add its own measurement script, served from this domain, which counts page views. For each one it reports the full address of the page you are on (including anything after a #, except on the recovery page, below), the referring site, your browser's user-agent string and language, and approximate country. It does not honour Do Not Track or Global Privacy Control; only a content blocker, or blocking scripts from this domain, stops it. What it leaves us is aggregate: visits per page, where they came from, roughly which country, and we have no tool that shows us an individual visit. How long the platform itself keeps those records is its own matter. None of it is tied to your name, email or payment details, because we never collect those. The platform also loads a second script that reports JavaScript errors and page performance: a random per-load session id, the page path (never the part after a #), the referring site and any utm labels in the address, timings and error messages. Session replay recording is not switched on.
• Shared reports: nothing stored. If you share a report, the six scores and the headline are encoded into the link itself, after the #. Browsers do not send that part of a URL to the server that hosts the page, and nothing we run sends it anywhere, so we hold no copy of a shared report, there is no row to delete and there is nothing for anyone to enumerate. Two honest consequences: whoever holds the link can read those scores, and we cannot revoke it for you — deleting a link means deleting the message you sent; and the platform's measurement script, above, reports the full address of a page it counts, so a shared link that you open is recorded with its scores and headline in that platform's page-view data. The score in the visible part of the address (/r/84) is the only thing our server sees, and it is a number out of 100 attached to nobody.
• Recovery links: moved out of the address before anything counts them. The link you can keep for a paid report carries the whole report and your PayPal order id after the #. When you open it, a small script at the very top of the page moves that part into your tab's session storage and clears it from the address bar before the measurement script runs, so the report and order id are not part of any page-view record. We still hold no copy, so a lost link cannot be looked up.
• An email address, only if you type one in. After you buy a report, the receipt offers to store your address beside your PayPal order id and a short fingerprint of the design, so support can find the purchase if you lose it. It is optional, it is asked for nowhere else on the site, and it is the only personal data we ever hold. We cannot email you — there is no verified sending address for this domain — so there is no confirmation message and no list you are joining. A separate box, unticked by default, is the only thing that would ever permit us to write to you, and until that box is ticked your address is used for nothing but finding your order. To have it deleted, email support@check.tattoo from that address and it is removed.
• Payments: handled entirely by PayPal. We never see or store your card details. We keep no payment record of our own beyond the order id saved in your own browser (and, only if you choose to type it in, your email address beside it, as described above).
• Support: if you email us, we have that email.
• Server logs: our hosting and analysis endpoint keep standard short-lived request logs, which include an IP address. They are used to run the service and to stop abuse. To slow down abuse, the analysis endpoint also counts recent requests per connection in our database, under a keyed hash of the IP address rather than the address itself; those counts are removed by the first check that runs after they are three days old.

COOKIES AND LOCAL STORAGE

We set no cookies of our own, and there are no advertising or cross-site trackers. The hosting platform sets two first-party cookies on this domain: a session id, set by the measurement script above so it does not count one visit twice, and a bot-protection cookie (__cf_bm, from Cloudflare), set on every response so that automated traffic can be told from people. Both expire within about thirty minutes, and neither follows you to another site.

Two things of ours sit in your browser's session storage: a flag set the first time you load a page, so the counts above can tell a first visit in this tab from a second page view within it, and — only if you arrived from a link carrying one — the utm_sourcelabel, so that if you buy something we can tell which channel sent you. One holds the value "1" and the other holds a word like "facebook". Neither is an identifier, and both are gone the moment you close the tab. Two more are short-lived hand-offs on your own device: when you press "check this design" in the Preview, the design is passed to the Check page through session storage and removed the moment that page reads it; and a recovery link's contents wait there, as described above, until you restore or close the tab. Neither is sent anywhere by us.

We do use your browser's local storage, which stays on your device and is never sent to us. It holds: any purchase you have made, so your unlock survives a reload; your most recent report, and up to five reports you bought, so a new check does not push a paid report out; and, if a payment was approved but never confirmed on this device, its PayPal order id, so you can quote it to support. Clearing your site data removes all of it — and because there are no accounts, an unlock cleared this way can be put back only from the recovery link you saved. If you no longer have it, email us the PayPal order id shown on your report and we will refund the purchase.

YOUR RIGHTS (GDPR / CCPA)

You have the right to access, correct, delete, or export any personal data we hold about you, and to object to or restrict processing. In practice we hold very little: there are no accounts and no stored images, and what both our own counts and the platform measurement leave us is aggregate totals rather than a record of you. Preview images are never uploaded, and we do not store Check images. For anything else, email support@check.tattoo.

CHILDREN

Check.Tattoo is not directed at children under 16. Do not use the service if you are under 16.

CHANGES

We may update this policy from time to time. Material changes will be announced on this page with an updated date at the top.