Privacy Policy

Effective November 1, 2026

Pixel Receipt (pixelreceipt.app) is a website made by HitScore Labs LLC ("we", "us"). This policy explains what happens to your data when you use it.

What happens when you check a photo

• In your browser: the photo is shrunk to a JPEG (at most 1600 pixels on its longest side), and its metadata is read on your device: size, camera make and model, editing software, date taken, Content Credentials, and similar tags. Nothing is uploaded until you tap "Check this photo".
• Sent for analysis: the shrunk JPEG and a short summary of those tags are sent to our server. The server passes the JPEG to:
  • Hive, to estimate whether the image is AI-generated or contains an AI-altered face.
  • Google Cloud Vision, to find web pages where the image appears.
  These services process the image under their own terms and privacy policies.
• Checking a link: if you paste a link, our server opens it, finds the picture on that page, and checks it as above. The site you linked to sees our server, not you.
• Matching pages: thumbnails of pages where your photo appears are fetched by our server, not your browser, so those websites never see your device or IP address. Opening a page is up to you.
• We don't store your photo. We keep the analysis result for up to 7 days so repeat checks of the same image are fast. It's stored under a one-way fingerprint of the image, not the image itself.

What happens when you check a certificate, PDF, Word or Excel file

• The file never leaves your device. Your browser reads the file itself. For a PDF: its digital signatures, its file history (which apps made it and when), any QR codes, and marks of editing on the pages. For a Word, Excel or PowerPoint file: when it was made and saved, tracked changes, comments, hidden text and sheets, macros, and where its links lead.
• What we receive: only the result: the verdict, the clues found, the boxes drawn on the first page, the printed lines (such as the apps named in the file and the website a QR code leads to), and the page count. We never receive the document, its text, or the names in it. The names of a file's author and editors stay on your device: a receipt says only whether they are the same person.
• What we keep: that result, as a receipt, for up to 13 months. The first page appears on a shared link only if you switch on "Show the first page on the link page", as a small image kept until you switch it off.
• QR codes are read in your browser. We don't open the link inside a QR code.
• Scanned pages: a scan is a picture, so its words are read from the picture on your device, by reading software that is kept on this site (nothing is fetched from another site). The words are not sent to us. If a web address printed on the page looks like a lookalike of an official site, only that finding is part of the result.
• Comparing two files: both files are read on your device and compared there. Nothing is uploaded and nothing is saved. Comparing needs a signed-in account but doesn't use up a check.
• Checking many files (Pro): each file is checked on your device as above, and each gets its own receipt. File names stay on your device: the table and the CSV file you download are made in your browser.
• Verifying a receipt: anyone with a receipt's number or link can look it up and see the same result that its link page shows: the stamp, the title, the number and the date. Nothing else about the receipt, and never who made it.

Your receipt

• We save each receipt (its verdict, findings, and list of matching pages) for up to 13 months so you can open it again and share it.
• Sharing: anyone with a receipt's link can see its verdict and evidence. Links aren't listed in search engines, but they aren't password-protected, so share them like you'd share any link.
• The photo is private by default. A shared link shows your photo only if you switch on "Show the photo on the link page". That saves a small copy (at most 640 pixels) until you switch it off or the receipt expires.

Accounts and cookies

• Before you sign in: you can look around and run the sample certificate without an account. We set a random identifier in a cookie so we can count daily visits. It contains no personal information. An account is needed before your first check.
• Signing in: we ask for your email address and send a six-digit code that works for 10 minutes. We keep your email, your plan, and a list of your recent receipts. A second cookie keeps you signed in for up to 60 days, or until you sign out.
• These cookies are needed for the site to work. We don't use advertising or analytics cookies.

Payments

Pro subscriptions are processed by Stripe. We never see your card details. We keep your Stripe customer ID and your subscription status so we can turn Pro on and off.

Email

We use your email address to send sign-in codes and to answer support requests. If you tick the optional box "Email me product updates" when you sign in, we'll also email you about new features and changes to Pixel Receipt, and every one of those emails has an unsubscribe link. If you don't tick it, you won't get them. You can also unsubscribe or ask to be removed at any time by emailing support@pixelreceipt.app. We don't sell or share the list.

Servers and abuse prevention

Our site runs on Cloudflare. Like any web service, it processes your IP address to deliver pages and to limit abuse. We keep a short-lived daily count of checks per network address (up to 2 days) and error logs (up to 7 days). These logs don't include your photos.

For the site's owner we also keep daily totals: how many browsers visited, how many checks were made, and how many people signed in or subscribed. A visit is counted once a day from the random cookie described above, which is forgotten after two days. The totals are only numbers and aren't linked to you.

What we don't do

• No advertising, no ad tracking, and no selling or sharing of data for advertising.
• No facial recognition. We never try to work out who is in a photo. We only check whether the image looks AI-made or edited, and where copies appear online.
• No analytics or tracking scripts.

Your choices

You can sign out at any time. To see, correct, or delete your account, saved receipts, or any saved photo copy, email support@pixelreceipt.app from the address you signed in with, and we'll take care of it.

Children

Pixel Receipt isn't directed to children under 13, and we don't knowingly collect their information.

Changes

If this policy changes, we'll update this page and the date above. Significant changes will also be noted on the site.

Contact

Questions or requests: support@pixelreceipt.app