Privacy Policy
Last updated: September 26, 2026
This policy explains what isthisrealai.com collects, why, and who else handles it. The site is run by an individual based in Hong Kong, who is responsible for your data.
The images you check
Until a Check starts, your image stays in your browser. We don’t receive it.
When you run a Check, your image goes to our server, which holds it in memory only (never on disk, never in logs) and passes it to our image-analysis provider. As soon as the provider responds, our server discards it. We don’t keep the image, its file name or its Verdict, and we keep no history of which images you checked.
Our image-analysis provider is a company based in the United States. Under its standard terms, it may keep submitted images for up to 14 days, may have people working for it review them, and may use them to improve its services. It may process them in the US and other countries.
What we store
- Your account: your email address. If you log in with Google, also the name and profile picture on your Google account, and the sign-in tokens Google issues.
- Your logins: for each login, the IP address and browser it came from, to keep your account secure.
- Credit Ledger: every change to your Credit balance (purchases, Checks, Credits returned after a failed Check, refunds, disputes, and Credits we add or remove by hand), with the time.
- Cost Ledger: for each Check, the time, your account, our provider’s reference for the request, what it cost us, whether it succeeded, how long it took and the image’s size in bytes. Not the image, its name or its Verdict.
- Payments: for each purchase, the checkout reference, the pack, the amount, tax, fees and currency, the Credits it added, and whether it was refunded or disputed. We never see or store your full card details.
We use this data to run your account and your Checks, take payments and handle refunds, keep the site secure, and keep the accounting records the law requires. We don’t sell it, and we don’t use it for advertising.
Cookies
We set only the cookies that keep you logged in. We don’t use advertising or tracking cookies.
Services that handle your data
- Our image-analysis provider analyzes the images you check, as described above.
- Stripe and Link. Sold through Link, LLC, a Stripe company, is the merchant of record for purchases. It receives your payment details, email address and billing country, and handles the payment, receipts, refunds and sales tax. See Link’s privacy policy.
- Google. If you log in with Google, Google tells us your email address, name and profile picture.
- Resend sends our login emails, so it receives your email address.
- Cloudflare. Every request to the site, including the images you check, passes through Cloudflare’s network, which protects the site and speeds it up. Cloudflare Web Analytics counts page views without cookies.
Our server is in Hong Kong. The services above may process data in the US and other countries.
How long we keep it
Your account details and login records: until you delete your account. Payment records and the Credit and Cost Ledgers: as long as tax and accounting law requires, currently seven years under Hong Kong law, even after you delete your account.
Deleting your account
Email [email protected] from the address you log in with and ask us to delete your account. We delete your account details and login records within 30 days. Unused Credits are lost when the account is deleted. We keep only the records the law requires, as described above.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your data, or to object to how we use it. Email [email protected] to use any of these rights. You can also complain to your local data protection authority.
Children
The site isn’t meant for anyone under 16.
Changes
We may update this policy. When we do, we’ll change the date at the top of this page.
Contact
Email [email protected].