Privacy Policy

This policy explains what ClearBG (clearbg.org and api.clearbg.org, owned and operated by Lunonia Inc.) keeps about you, why, for how long, and who processes it for us. The short version: images you upload on the website are deleted 24 hours after upload, images sent to the API are deleted right after the response, we never use your images to train AI models, and we don’t sell your data.

1. What we keep and for how long

• Images on the website: the image you upload, the full-resolution result and a preview up to 1000 pixels are kept in our file storage for 24 hours after upload, so you can download them, sign in or pay in between, and are then deleted.
• Images sent to the API: the original is deleted as soon as the GPU has read it, and the result as soon as it has been sent to you. If the connection drops before that, both are deleted within about 12 minutes.
• A record of each image, without the image: the file name, size and dimensions, the options you chose, its status, why it failed if it did, timings, the credits it used, and the account, device or API key it came from. We keep these for usage tables, billing questions and abuse prevention.
• API keys: only a hash of each key and its first characters, with the name you gave it, when it was created, last used and revoked.
• A random device ID, kept in your browser’s storage and in a cookie: counts the free image of the day, keeps your results tied to this browser and helps us limit abuse.
• Your IP address: used to count the free image of the day per network, to stop abuse (rate limits) and to tell which country a visit comes from. Where we keep it, we store a salted hash of it, not the address itself.
• Your account: your email address (and, with Google sign-in, the name and profile picture Google shares), your sign-in sessions, your credits and credit history.
• Payments: Stripe handles your payment details. We receive the payment ID, the product or plan, the billing period, the amount, the status, renewal and cancellation dates, and the email address you paid with.
• Usage events, linked to the device ID or your account: the page you landed on, the site and campaign that sent you, device type, country, and actions such as uploading an image, downloading or opening checkout.

Records without an end date above are kept until you ask us to delete them (section 5).

2. Your images

Your image goes from your browser (or your server, for the API) to our file storage at Cloudflare. A GPU server at Modal Labs in the United States reads it through a link that expires after 10 minutes, removes the background in memory and writes the result back to our storage; it keeps no copy. Nobody at ClearBG looks at your images, and we never use them to train AI models.

To make the Original / Removed switch work after you sign in or pay, the page keeps a small copy of your image (up to 1000 pixels) in this browser tab’s session storage; it never leaves your browser and is cleared when you close the tab.

3. Who processes data for us

• Cloudflare runs the Service: hosting, the database, file storage and the sign-in emails. Its Turnstile check (that you are a person, before free images without credits and before each sign-in email) runs in your browser and sees your IP address and browser signals.
• Modal Labs (United States) provides the GPU servers that remove backgrounds. It receives your image and returns the result as described in section 2; it doesn’t receive your account details.
• Stripe runs checkout, payments, receipts and refunds and receives your payment details directly.
• Google: if you sign in with Google, Google sends us your name, email address and profile picture.
• Traffic statistics: we run our own copy of Plausible Analytics, a privacy-friendly analytics tool that does not use cookies or track individual users. It does not store IP addresses or raw User-Agent strings: they are combined with a salt that is rotated and deleted every 24 hours to count unique visitors per day, and are used to work out the browser, operating system, device type and approximate location (country, region, city). It does not track people across devices, websites or apps. We only see aggregate statistics such as page views, referrers and countries.

We don’t sell your data.

4. Cookies and browser storage

• Device ID (browser storage and a cookie of the same name): counts the free image of the day and links your results to this browser. Kept until you clear your browser data.
• A small copy of your current image (session storage), as described in section 2; cleared when you close the tab.
• Sign-in session cookies: only if you sign in; until you sign out or the session expires.
• Human-check cookie: set when you pass the Turnstile check, so this browser isn't asked again for 24 hours.

5. Your rights

You can ask for a copy of the data we hold about you, or ask us to correct or delete it: email support@clearbg.org from the address on your account. We complete requests within 30 days. Deleting your account removes your credits, API keys and image records.

Payment records kept by Stripe follow Stripe’s own policy and legal retention rules.

6. Children

The Service is not meant for anyone under 13, and we don’t knowingly collect their data. If you believe a child has given us personal data, email support@clearbg.org and we will delete it.

7. Changes

We may update this policy. Changes are posted on this page with a new date. See also the Terms and the Refund Policy.