Your photos never leave your device when you use the MetaMarshal app. We can’t see them, store them, or lose them — the processing happens in your browser. The developer API processes files in memory and deletes batch outputs within one hour.
Nothing, by default. Two optional actions transmit data when you explicitly trigger them: resolving an address sends bare GPS coordinates (never the image) to a geocoding service, and the AI location estimate sends a downscaled copy of the image to our inference provider for one-time analysis. Both are labelled at the point of action and are never automatic unless you turn auto-resolve on yourself.
Photos you save to your library are stored in your browser’s local storage (IndexedDB) on your own device. They are not synced, backed up, or transmitted to us. Clearing your browser’s site data deletes them permanently.
An account stores your email, display name, and preferences. We don’t track your activity across the web, sell data, or run third-party advertising or analytics.
Files sent to the API are processed in memory and never written to durable storage. Batch outputs live in transient storage behind signed URLs that expire within one hour, at which point the files are deleted. We log request counts, sizes and timestamps for billing — never file contents or extracted metadata values.
One cookie: your session, if you sign in. It’s HttpOnly, first-party, and used solely to keep you logged in.
Questions about this policy: hello@metamarshal.com.