privacy · a field note

What we keep, and what we never keep

You photograph real places, sometimes with people in them. Here is exactly what happens to your picture.

What is stored

  • a processed image: file metadata stripped, faces and number plates blurred, resized to 1,600 pixels at most;
  • the fingerprint (SHA-256) of that processed image, written on-chain: it proves the photo was not altered afterwards;
  • a city, “Chicago, US”, nothing finer;
  • the date and time of the shot.

What is never stored

  • the original: it is processed in memory and never written to disk. If processing fails, nothing remains;
  • EXIF metadata (phone model, settings, coordinates);
  • GPS coordinates, in any form;
  • sharp faces.

Deleting a card

On every card in your notebook, “delete the image” really removes the image from our servers, at once. You sign the request with your wallet, that is all. The fragment you received stays yours, and the fingerprint stays on-chain, and it cannot rebuild the image.

What we see of you

Your wallet address, a fingerprint of your browser, your IP address and the country it points to. They enforce the quotas and catch account farms. They do not follow you elsewhere. We sell none of it.