Privacy Policy

Last updated: March 2026

1. Data we collect

We collect the minimum data necessary to operate the service:

  • IP address — used solely to enforce daily rate limits on the free tier. IP addresses are stored transiently in a rate-limit cache and are not written to permanent storage or associated with user accounts.
  • Contact form submissions — when you submit the contact form, we receive your name, email address, company (if provided), and your message. This data is used only to respond to your inquiry and set up API access.

We do not collect analytics, fingerprinting data, behavioral data, or any information about how you use the watermarked images after they leave our API.

2. Images

We do not store uploaded images. Images submitted to the API are processed entirely in memory. The watermarked output is returned in the API response and the original upload is discarded immediately. No image data is written to disk or retained after the response is sent.

Watermark payloads (the message you embed) are also not stored server-side. You are responsible for keeping a record of which payload was embedded in which image if you need to perform detection later.

3. Cookies

ForensicMark does not use first-party cookies or any tracking cookies. The only cookie-like mechanisms present are those set by Cloudflare Turnstile, which we use for bot protection on the free-tier endpoints. Turnstile is a privacy-preserving challenge mechanism that does not track users across sites. See Cloudflare's privacy policy for details on what they collect.

4. Third-party services

  • Cloudflare Turnstile — bot protection for rate-limited endpoints. Subject to Cloudflare's privacy policy.
  • CopyrightShark — our DMCA enforcement partner. If you choose to initiate a takedown through the CopyrightShark integration, relevant metadata (your watermark payload, detection result, and target URL) will be shared with CopyrightShark for the purpose of filing the DMCA notice. CopyrightShark's own privacy policy governs their use of that data.
  • Formspree — processes contact form submissions. See Formspree's privacy policy .

5. Data retention

Rate-limit records are retained for 24 hours (one reset cycle). Contact form submissions are retained for as long as needed to fulfill the request, and deleted on request. We do not retain image data at all.

6. Your rights

If you have submitted a contact form and would like your data deleted, or if you have any privacy-related questions, email us at hi@forensicmark.com . We will respond within 5 business days.

7. Changes to this policy

We may update this policy as the service evolves. Material changes will be noted with an updated "Last updated" date at the top of this page.

Contact

Privacy questions: hi@forensicmark.com