Privacy Policy

Information We Collect

We collect information you provide directly, including email addresses when you register for an account. We also collect information about the images you upload and the secrets you create.

How We Use Your Information

We use the information we collect to provide, maintain, and improve our services, to communicate with you about your account, and to protect our users and service.

Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as described in this policy or as required by law.

Image Data Processing

All image processing occurs securely on our servers. Here is how we handle your image data:

  • Image Steganography: When you create a salted image, we embed a unique code into your image using DCT (Discrete Cosine Transform) steganography. The code is embedded directly in the image's frequency coefficients, and your original image is processed and returned with the secret hidden within.
  • Image Storage: The salted images are stored securely in Cloudflare R2 storage. Your images are associated with your account and can only be accessed by you when logged in.
  • Image Decryption: When you or a recipient uploads an image for decryption, we extract the hidden code and retrieve the associated secret. The uploaded image is processed temporarily and not persistently stored.

Data Retention

We retain your personal information and salted images for as long as your account is active or as needed to provide you services. You can delete your account and all associated data at any time.

Payment Data

Users may purchase a one-time Digital Pass. Payments are handled through Creem, and payment-related data may be processed by Creem to complete checkout, tax, fraud prevention, compliance, receipts, refunds, and support.

  • Checkout may redirect you to Creem or a Creem-hosted payment flow.
  • Creem may process your email address, payment details, billing details, tax information, and compliance information.
  • Add Salt does not store complete card numbers or full payment credentials on our servers.
  • Add Salt may store payment status, order or checkout identifiers, selected Digital Pass tier, supporter status, and related timestamps so we can activate benefits and troubleshoot support requests.
  • Creem may send webhook events back to Add Salt with payment status updates such as completed payment or refund status.

Data Security and Encryption

Your secrets are encrypted and stored securely on our servers. We use industry-standard encryption to protect your data. Secret messages are never stored in plain text and can only be accessed by you or those who have your unique salted image.

Data Security

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction.

Your Rights

You have the right to access, correct, or delete your personal information. You can update your account information at any time through your dashboard or by contacting us.

Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

Contact Us

If you have any questions about this Privacy Policy, please contact us at support@saltpic.com