Privacy, briefly.
Images are processed by AI. Uploads are not public by default. Source images are deleted automatically after 7 days and pucked images after 90 days. You can delete yours right away from its result page.
What we keep, and for how long
| What | Kept for |
|---|---|
| Your image, cleaned and re-encoded | 7 days |
| The pucked image and Puck's idea | 90 days |
| Records of failed or declined attempts, without images | 30 days |
| Your IP address | never stored |
| EXIF metadata, including location | never stored |
| The original filename | never stored |
What happens to an upload
- Our server decodes and re-encodes the image. EXIF metadata, including GPS location, is removed before anything else happens.
- The cleaned copy goes to OpenAI three times: a safety check, Puck's idea, and the edit itself. Under OpenAI's API terms, it is not used to train their models.
- Images and results are stored on our own server, never on a public URL. Each result gets a long random link that only works for people you share it with.
- Deleting a puck immediately removes the result, your original image, every other attempt you made on that image, and their records.
- Images that fail the safety check are deleted on the spot. Only the decision (which categories were flagged) is kept, for 30 days.
What we know about you
- No accounts and no ads.
- To enforce the daily limit, we keep a one-way hash of your IP address. The key changes every day, so yesterday's hash can't be linked to today's.
- Two cookies, both ours: one keeps the form secure, and one random token remembers which pucks came from your browser so only you see "delete now".
Third parties in your browser
- Ahrefs Web Analytics counts visits to our public pages: which page, where you came from, and your browser, device and country. It sets no cookies and stores nothing in your browser. It never runs on result pages, so your result links and images never reach it.
- Cloudflare Turnstile checks that an upload comes from a person rather than a bot. It loads when you start using the page, and Cloudflare processes your IP address and browser signals to make that check.
Shared links
A result link is unlisted. Anyone you give it to can see the pucked image and, while it still exists, the original. Delete the puck when you no longer want that.