Privacy Policy

---

Last updated: July 15, 2025

DotCheck provides AI detection for content on web pages using colored dots. This policy outlines our data practices.

• Free Users: No personal data or customer identity is collected. Image URLs, video frames, or text from visited websites are sent for temporary analysis and not stored.
• Paid Users: Personal data, such as name, email, and payment details, is collected and stored by third-party services (Stripe and Firebase). DotCheck stores only minimal, non-sensitive data, such as user ID and subscription details, to manage accounts.
  DotCheck complies with GDPR and similar regulations, with an emphasis on collecting only necessary data.

This privacy policy applies to the DotCheck browser extension and the website dotcheck.ai (collectively, "DotCheck"). Use of DotCheck constitutes acceptance of this policy.

DotCheck analyzes web content to identify AI-generated images, videos, and text, indicating results with colored dots (red for likely AI-generated, green for non-AI-generated). Personal data or customer identity is not directly collected or stored. For free users, only content elements (such as image URLs, video frames, or text snippets) are processed temporarily. For paid users, third-party services manage personal data, and DotCheck retains only required non-sensitive information.

Free users:
No personal data or customer identity is collected or stored from free users. During use, elements such as image URLs, video frames (temporarily extracted from videos), or text snippets from visited websites are sent to the server for analysis. Images and videos are assessed by Sightengine for AI generation, and text is evaluated by Winston.ai. These elements are processed immediately and not retained, except for anonymized cached results based on content hashes (unlinked to users or activity). Websites visited, browsing history, and other personal information are not tracked.

Paid users:
For premium features, an account is created via Firebase Authentication, and payment information is provided through Stripe. DotCheck does not collect or store personal data directly. Instead:

• Firebase Authentication: Email and password are provided to Firebase, which creates a unique user ID (UID). DotCheck does not access or store the email or password; these are handled by Firebase according to its privacy policy.
• Stripe Payment Processing: Name, email, and payment details are provided to Stripe. DotCheck does not access or store this information; it is managed by Stripe per its privacy policy.

DotCheck stores the following data in Firestore to administer subscriptions:

• Firebase UID
• Stripe customer ID
• Subscription tier
• Subscription ID

This data is used only to confirm subscription status and provide features. It is kept as long as required for these purposes and legal obligations.

Server logs:
Servers record IP addresses and request timestamps for technical needs, including troubleshooting and security. Logs are not associated with individual users and are deleted after 30 days.

Local storage:
The extension stores preferences—such as dot visibility, disabled websites, and analysis settings—on the user's device. This data is not transmitted to servers and serves only to adjust the user experience.

Data collection is limited to what is required for DotCheck's operation. Free users involve no personal data. For paid users, personal information is managed by third-party services, and DotCheck holds only non-sensitive identifiers.

DotCheck uses third-party services for specific functions, with data processing conducted on its behalf:

• Firebase: Manages authentication and stores email and password. DotCheck uses only the Firebase UID for subscriptions.
• Stripe: Handles payments and stores name, email, and payment details.
• Sightengine: Analyzes image URLs and video frames for AI-generated content. Only these elements are sent, without personal data.
• Winston.ai: Assesses text snippets for AI generation. Only text is sent temporarily, without identifiers.
• MongoDB: Caches anonymized analysis results by content hashes for efficiency.

Agreements with these services ensure adherence to data protection laws, including GDPR, and confine data use to stated purposes.

• Free Users: Server logs and temporary content processing are based on legitimate interests in service security and operation (GDPR Article 6(1)(f)).
• Paid Users: Subscription data is processed to perform the service contract (GDPR Article 6(1)(b)). Third-party data follows the providers' legal bases, as stated in their policies.

Data is not shared with third parties except as required for operations, such as payments (via Stripe) and authentication (via Firebase) for paid users. Providers are required by agreement to secure data and limit its use.

Measures are in place to protect stored data (e.g., in Firestore), including encryption and access restrictions, against unauthorized access, use, or disclosure. For paid users, payment and authentication data are secured by Stripe and Firebase standards.

Rights under GDPR include access, rectification, erasure, restriction of processing, portability, and objection to personal data. Due to limited data held by DotCheck, requests may pertain to third-party providers (e.g., Stripe or Firebase). Assistance will be provided for valid requests as per applicable laws. Contact contact.dotcheck.ai.

DotCheck analyzes content on visited websites but does not oversee their data practices. Responsibility for those sites' privacy policies is not assumed.

The website and extension do not employ cookies or tracking for personal data collection. Third-party services (e.g., Firebase, Stripe, GoDaddy) may use essential cookies for functions like authentication. Refer to:

• Firebase: https://firebase.google.com/support/privacy
• Stripe: https://stripe.com/privacy
• GoDaddy: https://www.godaddy.com/legal/agreements/privacy-policy

This policy may be revised, with updates posted on dotcheck.ai.

DotCheck is not directed to children under 13. Data from such individuals is not knowingly collected. Use by those under 13 is not permitted.

Inquiries regarding this policy or privacy matters may be directed to contact.dotcheck.ai.