Privacy Policy

Last Updated: March 16, 2026

Cutout Magic

This Privacy Policy describes how Cutout Magic collects, uses, and handles your information when you use our website or browser extension.

1. Information We Collect

1.1 Image Data

When you use Cutout Magic to extract or remove objects and backgrounds, we process the images you choose to upload. These images are stored on Cloudflare R2 to allow you to access them at any time.

1.2 Account Information

We collect basic information such as your email address and name provided by you directly during registration. This data is stored in Turso (a secure SQLite database).

1.3 Usage Credit Data

Some tools cost usage credits that you can purchase. We keep track of these purchases and history (which tools you used and when) to manage your balance.

1.4 Security and Session Data

To protect against abuse, bots, and unauthorized access, we collect and store the following when you log in:

• IP Address: Your IP address is stored with your session. This helps us detect and prevent brute-force attacks, spam, and other malicious activity.
• User Agent: The browser and device information you use to access our service is stored with your session to help identify unusual login patterns.

We also use rate limiting (10 attempts per 60 seconds) to prevent automated attacks.

1.5 Extension-Specific Data

The Cutout Magic browser extension only accesses the images that you explicitly upload.

2. How We Use Your Information

We use the collected data to:

• Process images and provide the cutout/labeling/cropping services you request.
• Manage your account and usage credit balance.
• Maintain a history of your processed images for your convenience.
• Protect against abuse: IP address and user agent data help us enforce rate limits and detect bots, hackers, or other malicious actors attempting to abuse our service.

3. Extension Permissions

Our browser extension requires the following permissions to function:

• sidePanel: To provide a convenient interface for managing and uploading images.
• Host Permissions: To communicate with our API to access your account and process images.

4. Data Sharing and Third Parties

We do not sell or share your personal data with anyone else—including IP addresses and user agents. We only use this data internally to protect our service from abuse. We process your data using the following third-party services:

• AI Service Providers: We use Google Cloud Vision for object identification and Google Gemini for advanced object cutouts. These providers process images according to their own privacy policies.
• Payment Processors: We use Stripe to securely handle usage credit purchases.

5. Data Retention

• Images: Images and their processed versions are stored on Cloudflare R2 as long as you need them on our servers so you can access your history. You may request to delete your images or your entire account by emailing [email protected] at any time.
• Account Data: Retained as long as your account is active.
• Usage Credits: Usage history is kept to maintain an accurate balance and provide a record of your transactions.
• Session Data: IP address and user agent are stored with your session and retained for the duration of the session (up to 7 days). When the session expires or is deleted, this data is also deleted.