Privacy Policy
Last updated: 21 October 2026
Contact: support@catfishspotter.com
1. Who we are
CatfishSpotter (“we”, “us”) runs the face search and AI image check on this website. We are responsible for the personal data described in this policy. Contact us at support@catfishspotter.com.
2. The short version
- You do not need an account. We only ask for what we need to take payment and send your credit code.
- Your searches and their results are stored only in your own browser. We do not keep them on our servers.
- A photo for a full face search is forwarded to our search provider and never saved on our servers.
- The AI image check runs on our server. The photo is scored in memory and dropped. We do not keep it.
- We do not sell personal data.
3. What we collect and why
Photos you upload for a face search
When you run a full face search, the photo is forwarded to our facial recognition provider (FaceCheck.ID) to run the search. It is never saved on our servers: it only exists for the few seconds the request takes, and is removed as soon as it has been sent. A free result does not run that search and does not send the photo to the provider. The results (links, small preview images and similarity scores) are sent straight back to your browser and are not saved on our servers.
Faces can count as biometric data. We process a photo only because you choose to upload it and ask us to search it. You must have the right to use any photo you upload, and you must not upload photos of children.
The AI image check
The free check that asks whether a photo looks generated runs on our own server. The image is scored in memory and then dropped. We do not store the photo, the score, or a copy of the result.
What is stored in your browser
So that you can reopen a report and keep using a credit code, your browser keeps the following in its own storage on your device: your credit code, and your search reports, including the photo you selected. We cannot see or access this data. You can delete reports from Search history, and clearing your browser data for this site removes all of it.
Purchase details
At checkout we collect the email address you give us, plus the pack, the amount, and the credit code we issue. We keep a record of how many credits each code has left. Payments are handled by Stripe, and we never receive your full card details.
Technical data
- A one-way hash of your IP address, used to limit how many free checks can run from one connection. These counters are kept for up to 24 hours. We do not store the address itself, and it is not tied to a photo or a result.
- An anonymous count of how many searches ran each day. It does not say who searched or what they searched for.
- Standard server logs kept by our host for security. Your photo and results are not part of them.
Emails
We email you your credit code when a payment clears. We do not send a marketing list.
4. Legal bases (EU/UK GDPR)
| Purpose | Legal basis |
|---|---|
| Running a search you ask for | Performance of a contract; for photos, your explicit consent given by uploading |
| Taking payment, sending your credit code, handling refunds | Performance of a contract |
| Accounting and tax records | Legal obligation |
| Rate limits, fraud and abuse prevention, security | Legitimate interests |
5. Who we share data with
We share data only with service providers that help us run the Service:
- FaceCheck.ID: runs face searches on photos you upload for a paid search.
- Stripe: processes payments.
- Our hosting and email delivery providers: store the website and send your credit code.
- Telegram: sends our team an internal notification for each order, which includes the buyer’s email, the pack and the amount. It does not include the photo or the search result.
We may also disclose data if the law requires it, or to protect people from harm or fraud. We do not sell personal data or share it with advertisers or data brokers.
6. International transfers
Some of these providers are located outside the EU and UK, including in the United States. Where this happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
7. How long we keep data
| Data | How long |
|---|---|
| Uploaded photos | Never saved on our servers |
| Searches and results | Never saved on our servers |
| Reports in your browser | Until you delete them or clear site data |
| Rate-limit counters | Up to 24 hours |
| Credit code records | As long as the code is valid, then as part of the order record |
| Orders and invoices | As long as tax and accounting law requires |
8. Your rights
Depending on where you live, you can ask to see, correct or delete your personal data, restrict or object to how we use it, receive a copy of it, or withdraw your consent. You can also complain to your local data protection authority.
The only personal data we hold about you is your order and credit code. Your searches and results are in your browser, where you can view and delete them yourself.
Because there are no accounts, please email support@catfishspotter.com from the address you used at checkout, or include your credit code, so we can find your data. We reply within one month.
9. If you appear in search results
We do not run our own face database, and we do not keep search results. Results point to pages on other websites and come from our provider’s index. To have a page removed, contact the website that publishes it. To be removed from the facial recognition index, contact FaceCheck.ID.
10. Children
The Service is only for adults aged 18 and over. Searching photos of children is not allowed. If you think a child’s data has been processed, contact us and we will delete whatever of it we hold. Search results are not on our servers.
11. Security
We use HTTPS encryption and restricted access, and we do not store uploaded photos or search results on our servers. No system is completely secure, but we work to protect your data.
12. Changes to this policy
We may update this policy. The “Last updated” date at the top shows when it last changed.
13. Contact
For privacy questions or requests: support@catfishspotter.com.