Privacy Policy

Effective 2 August 2026. Covers cookies and similar technologies.

Your media never leaves your device. Editorial pages may contact analytics and advertising providers, depending on your consent choices.

The short version

• Your photos are processed inside your browser. They are never uploaded.
• There are no accounts, no sign-ups, and no payments — so we hold no profile, password, or card data.
• We do not sell or share personal information, and we never will.
• The tool pages set no cookies and make no third-party requests. You can verify both in your browser's Network tab.

Who is responsible for your data

MarkWipe is operated by Elixo Group LLC, which is the data controller for this site. Because the tool processes your media entirely inside your own browser, the controller never receives, stores, or has access to the files you edit.

Your media

Photos you open in MarkWipe are decoded, edited, and exported entirely by your own browser using your device's own hardware. They are never uploaded, never transmitted to us, and never stored on a server. They exist only in your device's memory while you work, and they are gone when you close or reload the tab.

This is an architectural fact, not a policy promise we could quietly change: there is no server-side upload endpoint in MarkWipe to receive a file. If a future feature ever required one, it would be announced clearly and would not be switched on silently.

What we collect

On the tool itself: nothing. No accounts, no email addresses, no copies of your files, no per-visitor profiles.

Automatically, as with any website: our hosting provider (Cloudflare) processes standard request data — including your IP address, browser type, and the page requested — in order to deliver the site and protect it from abuse. This is ordinary server operation and is necessary for the site to work at all. We do not use it to identify or profile individual visitors.

Editorial pages (guides, per-generator pages, blog): these load Google Analytics to count visits and see which guides are read. It runs only on editorial pages — never on the tool, and never on any page that can hold your media. In the EEA, UK, and Switzerland it runs in a cookieless mode that stores nothing on your device unless and until we can properly ask for consent; everywhere else it sets its standard measurement cookies unless your browser sends the Global Privacy Control signal, which we honor as a decline. Google processes this data on our behalf; advertising may be added to the same pages later. See “Cookies” and “Advertising” below.

Cookies and similar technologies

The tool and the legal pages set no cookies at all. On editorial pages, Google Analytics may set its measurement cookies (_ga and _ga_*, which distinguish returning browsers for up to two years) — but only outside the EEA, UK, and Switzerland, and only when your browser does not send Global Privacy Control, as described above.

The tool does store two things locally on your device, which are technically browser storage rather than cookies:

• The AI engine files (about 56 MB), cached so the tool starts quickly on later visits. This cache holds the engine and nothing else — never your media.
• Small interface preferences, such as your last brush size. Plain settings, no identifiers.

You can clear both at any time from the in-app “Clear local data” control or through your browser's site-data settings. Browsers may also evict the cache on their own, in which case the engine is simply fetched again.

Cloudflare may set a strictly necessary security cookie to protect the site from automated abuse. If advertising is introduced on editorial pages later, this section will be updated to name the provider and its purpose before anything is switched on — exactly as it was for Google Analytics above.

Advertising

MarkWipe is free and intended to stay free. There is no subscription, no paid tier, and no feature is locked behind payment. The plan is to fund the project with advertising on editorial pages only — the guides and per-generator pages — and never on the tool.

No advertising is running today. When it is introduced: ads will never appear on the tool or on any page that can hold your result; you will be asked for consent where the law requires it; and this policy will name the ad provider and the choices available to you before any ad code loads.

Legal bases for processing (UK/EU visitors)

Where the UK GDPR or EU GDPR applies, we rely on: legitimate interests for operating, securing, and maintaining the website (including the standard request data described above); and consent for any non-essential analytics or advertising on editorial pages, which you may withdraw at any time. We do not rely on consent for the tool itself, because the tool collects nothing.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal data, to object to or restrict processing, and to withdraw consent. Under California's CCPA/CPRA you also have the right to know, delete, and opt out of sale or sharing — and we note plainly that we do not sell or share personal information, so there is nothing to opt out of.

An honest practical note: because we hold no accounts and no copies of your files, we usually have no personal data about you to produce or erase. If you contact us by email, we will hold that correspondence, and you can ask us to delete it. To exercise any right, write to hello@markwipe.com. You also have the right to complain to your local data protection authority.

Data retention

Your media: not retained at all — we never receive it. Correspondence you send us: kept only as long as needed to deal with your query and any legal record-keeping. Server request logs held by our hosting provider: retained on their standard short schedule for security and operations.

International transfers

Because your media never leaves your device, it is never transferred anywhere. The website itself is served from a global content network, so the page you are reading may be delivered from a server near you; our operator is based in the United States.

Children

MarkWipe is not directed at children and we do not knowingly collect personal data from anyone under 13 (or under 16 where local law sets that threshold). Since the tool requires no account and collects no personal data, there is in practice nothing for us to collect. If you believe a child has sent us personal data by email, contact us and we will delete it.

Security

The site is served over HTTPS with a strict content security policy, and the tool pages are isolated so that no third-party code can run where your media is handled. The strongest security property is structural: files that are never uploaded cannot be exposed by a breach of ours.

Changes to this policy

If this policy changes we will update the effective date above. Material changes — in particular introducing advertising or any new data collection — will be described clearly on the page rather than slipped in silently.

Contact

Questions, privacy requests, or complaints: hello@markwipe.com, or by post to Elixo Group LLC at the address above.