Privacy Policy

Last updated: October 21, 2026

Your images and text

We can't see your images. Your image and the text you type are used only to make your edit and are not kept afterwards. Our analytics and usage records never contain your image or your text.

When you replace text, the editor sends the image (or, if you drew a box, only the area around it), together with the text you typed, to our server. Our server passes it to an established cloud AI image-processing service to generate the new text, and returns the result to your browser. Nothing is uploaded until you click Generate.

We do not save your images, the selected areas or the text you type on our servers. Downloads are created in your browser.

The only exception is optional: if an edit fails twice in a row, we may ask whether you want to share that image and your text with us so we can find out why. Nothing is shared unless you tap Share. A shared sample is kept for 3 days and then deleted automatically.

Free edits and IP addresses

To keep free edits fair and to protect the service from abuse, we convert your IP address into a one-way hash and use that hash to count free edits and to limit requests. We do not store your raw IP address in our own databases. Our hosting and infrastructure providers may process IP addresses as needed to deliver the site and keep it secure.

Signing in with Google

Signing in is optional. If you sign in, we store your email address and name from Google to keep track of the extra edits on your account. We don't get your Google password, and we don't use your email for marketing. A sign-in cookie keeps you signed in for up to 30 days, or until you sign out. Google's sign-in button is loaded from Google only when you are about to run out of free edits or open the sign-in window; Google processes that sign-in under its own privacy policy: policies.google.com/privacy. To delete your account, email us at the address below.

Analytics

To understand how the tool is used, our pages store a random anonymous identifier in your browser's local storage, along with your first visit details: the page you landed on, the website that referred you, and any campaign (UTM) parameters in the link. This is a first-party identifier, not a third-party advertising cookie.

Our own analytics records may include:

• the pages you visit and where you came from;
• how you use the tool, such as opening an image, generating a replacement, seeing the result and downloading it, and whether the replacement succeeded or failed (with a general error type);
• basic facts about the image, such as its format, pixel size and file size, and how large the selected area is;
• your browser's time zone;
• your device type, browser and operating system, in broad categories rather than your full browser details;
• what your device can do, such as whether it has a touch screen and its screen and window size;
• the state of the page at key moments, for example whether the Download button was on screen when your result appeared;
• approximate location (country, region and city) and time zone, estimated from your IP address by our hosting provider.

These records do not contain your images, the text you type or your IP address. So that one visitor is not counted twice when their browser storage is cleared, each record also carries a short code computed from your IP address and browser details with a secret key. The code changes every day and cannot be turned back into your IP address.

We also use Umami, a web analytics service, to see aggregate traffic and feature usage. We configure it to respect your browser's Do Not Track setting, and we do not send it your anonymous identifier.

Session replay

For visitors outside the European Union, the European Economic Area, the United Kingdom and Switzerland, we use Microsoft Clarity to see how people use the site, such as clicks, taps, scrolling and how the page looked, so we can find and fix problems. Clarity hides the text you type, and it does not capture your image or your edited result. We link these recordings to the same anonymous identifier described above. Microsoft processes this data under its own privacy statement: privacy.microsoft.com/privacystatement. Visitors in the regions above are not recorded.

Feedback you choose to send

If you send feedback, we store your message and optional email with your anonymous visitor and tab-session identifiers, the page, recent editing request, submission time, and whether you clicked Download. Only our authorized administrators can view it to investigate your report. Providing an email is optional; it lets us contact you about a fix. We do not send feedback contents or your email to Umami.

Your choices

You can clear your browser's local storage at any time to remove the anonymous identifier, or turn on Do Not Track to stop Umami analytics.

Changes

We may update this policy as InPlaceText changes. The date at the top shows when it was last updated.

Contact

Questions about this policy or your data: [email protected].