Privacy Policy

Uplocal is a browser based AI image upscaling service operated by HiddenLab (SIRET: 980 715 809 00011), a company registered in France. This privacy policy explains how we collect, use, and protect your personal data when you use our website at uplocal.app and the services available through it.

We are committed to protecting your privacy. The core design principle of Uplocal is that your images are processed entirely on your own device. No image data is ever transmitted to our servers or any third party. This policy describes in detail what information we do collect, why we collect it, and how you can exercise your rights over that data.

By creating an account or using our services, you acknowledge that you have read and understood this policy. If you do not agree with any part of this policy, please do not use our services.

This is the most important section of our privacy policy. Unlike most online image upscaling services, Uplocal processes your images entirely within your web browser using WebAssembly and TensorFlow.js. The AI model runs on your own device's processor or GPU.

When you upload an image to Uplocal, the following happens: the image stays in your browser's memory, the AI model processes it locally, the upscaled result is returned to you, and you can download it. At no point during this process is your image data sent to our servers, stored in any database, transmitted to third parties, or accessible by anyone other than you.

You can verify this yourself by opening your browser's developer tools and inspecting the Network tab while using Uplocal. You will see no upload requests for your images.

We collect minimal personal data to operate your account and process payments. Specifically, we collect:

• Account information: your email address and name when you sign in via Google OAuth.
• Usage metadata: technical information about your upscale operations such as the scale used (2x, 4x, 8x), input and output dimensions, processing time, and file format. We do NOT collect the actual images.
• Subscription data: your active plan (Free, Pro, or Studio), subscription status, and billing period dates. Payment card details are handled and stored exclusively by Stripe and never reach our servers.
• Preferences: your default settings such as theme, language, and default upscale options.

We use the limited data we collect for the following purposes: to create and manage your account, to enforce usage limits according to your subscription plan, to display your usage history and statistics in your dashboard, to process subscription payments via Stripe, and to send essential service emails such as account confirmations and billing notifications.

We do not use your data for advertising, profiling, or any purpose unrelated to providing the Uplocal service.

Uplocal relies on a small number of third party services to operate. Each service receives only the minimum data necessary for its function:

• Google OAuth: handles authentication. Receives your sign in request and returns your verified email and name.
• Stripe: handles all payment processing. Receives your payment information directly via their secure form. We never see or store your card details.
• IONOS: hosts our website infrastructure on a private VPS in Germany. Processes web requests but never sees your images.
• MongoDB Atlas: stores your account data and usage metadata in our database.

Uplocal uses only essential cookies required for the service to function. These include:

• Authentication session cookie: keeps you signed in across pages.
• Theme preference: remembers your light or dark mode choice.
• CSRF protection token: prevents cross site request forgery attacks.
• Stripe fraud prevention: used during payment to detect fraudulent transactions.

We do not use any tracking cookies, advertising cookies, or third party analytics cookies that identify you personally.

Your account data is stored in MongoDB Atlas, a managed database service with industry standard security practices. All data transmission between your browser and our servers is encrypted via HTTPS. Your password is never stored because we use Google OAuth for authentication. Payment card information is handled exclusively by Stripe and never reaches our infrastructure.

We retain your account data for as long as your account is active. If you delete your account, all associated data is permanently removed from our database within 30 days. You can request the deletion of your account at any time by contacting us at contact@metalya.fr.

Under the General Data Protection Regulation (GDPR) and similar privacy laws, you have the following rights regarding your personal data: the right to access your data, the right to correct inaccurate data, the right to delete your data, the right to data portability, the right to object to processing, the right to restrict processing, and the right to lodge a complaint with a supervisory authority such as the CNIL in France.

To exercise any of these rights, please contact us at contact@metalya.fr. We will respond to your request within 30 days as required by law.

If you have any questions about this privacy policy or our data practices, please contact us:

• HiddenLab (SIRET: 980 715 809 00011)
• Email: contact@metalya.fr
• Website: hiddenlab.fr