Privacy Policy

1. Zero-Upload In-Browser Architecture

Unlike conventional cloud-based file tools that secretly upload your documents to remote servers for processing, Metadata Remover is built entirely around local client-side execution:

• Photos (JPEG, PNG, WebP, HEIC): Decoded and re-encoded directly on your device's GPU/CPU using the HTML5 Canvas API and byte buffers.
• Documents (PDF, DOCX, XLSX, PPTX): Binary metadata streams, revision history tables, and author entries are sanitized locally in-memory via WebAssembly.
• Network Verification: You can open your browser's Developer Tools (F12) → Network tab at any time and confirm that zero file payloads are transmitted over the wire.

2. Data We NEVER Collect

Because our service requires no registration, no authentication, and maintains no user database:

• We do not collect or store your files: Personal photos, legal contracts, confidential financial spreadsheets, and GPS location coordinates are never seen by us.
• We do not ask for personal information: No names, email addresses, phone numbers, passwords, or payment credentials are required to use the tool.
• We do not track you across the web: No Facebook pixels, ad network beacons, or behavioral profiling trackers exist on this site.

3. Local Device Storage (localStorage)

We use your browser's built-in localStorage mechanism strictly to remember a single aesthetic preference:

This data remains on your physical device, is never transmitted to any server, and can be cleared instantly by clearing your browser cache.

4. Global Privacy Compliance (GDPR, CCPA, LGPD)

Because we do not ingest, store, or sell personal data:

• EU GDPR (General Data Protection Regulation): We adhere to the core principles of Data Minimization (Article 5(1)(c)) and Privacy by Design (Article 25). Zero personal data processing occurs on remote infrastructure.
• California CCPA / CPRA: We do not sell, share, or monetize personal information. We have no commercial relationship with data brokers.
• Brazil LGPD (Lei Geral de Proteção de Dados - Law 13,709/2018): Fully compliant with Brazilian data sovereignty regulations. Users maintain absolute custody of their personal files.

5. Static Asset Hosting & Infrastructure Security

Our static code (HTML, CSS, JavaScript, WebAssembly binaries) is distributed globally via reputable Content Delivery Networks (CDN). Like all internet services, standard web server logs (IP address, user agent, timestamp) may be temporarily processed by infrastructure providers strictly for DDoS prevention, rate limiting, and network integrity.

6. Your Data Rights

Under global privacy frameworks, users have rights regarding access, portability, and erasure of their personal information.

Because we do not identify you or hold your data on any server, there is no database entry to modify or delete — you already possess complete, autonomous custody over your files.

7. Data Protection Officer & Contact Information

If you have questions about this policy, want to suggest security improvements, or require assistance:

8. Policy Amendments

We may update this policy occasionally to reflect new browser security APIs or emerging privacy regulations. Any updates will be reflected with a revised timestamp at the top of this page.