Privacy Policy

One-time scan images are sent to the HushTrace API in memory, normalized to remove metadata, used with configured providers for the requested scan, and not intentionally written to HushTrace storage. Hashes, provider scores, source URLs and operational metadata may be retained.

Recurring monitoring requires explicit opt-in and stores an encrypted copy because scheduled jobs must access the image later. This is encryption at rest, not zero-knowledge storage.

HushTrace does not intentionally accept intimate imagery depicting anyone under 18 and does not sell customer images or use them to train models.