Privacy

Last updated 14 August 2026

Short version: your photos aren't stored, your address isn't stored in the clear unless you make an account, and there are no trackers or ad pixels on this site.

What happens to a photo

Your browser resizes it before anything is sent, so the original never leaves your device.
The resized copy is sent over HTTPS to our caption endpoint.
It's passed to Anthropic's Claude model running on Amazon Bedrock in the AWS us-east-1 region, which returns the captions.
It's discarded when the request finishes.

It is never written to a database, a storage bucket, or a log. There is no gallery and no history of your uploads, which also means we can't show you past captions — that's the trade.

Amazon Bedrock does not use content passed through it to train models, and we don't either.

What we store

Data	Why	Kept
A salted hash of your IP address	Counting free daily use	2 days, then auto-deleted
Your email address (only if you sign in)	Identifying your account and credits	Until you ask us to delete it
Your credit balance	Knowing what you've paid for	Until you ask us to delete it
A hash of your sign-in link	Making the link work once	15 minutes
Operational logs (timing, tone used, token counts)	Debugging and cost tracking	Short-term, no photos or captions

The IP hash is salted with a secret we hold, so the stored value can't be reversed into an address or matched against a list of addresses. Sign-in links are stored only as a SHA-256 hash, so even a copy of that table can't be used to get into an account.

Cookies

One cookie, ss_session, set only after you sign in. It holds your email address and an expiry, signed so it can't be tampered with. It's HttpOnly, Secure and SameSite=Lax, lasts 30 days, and signing out deletes it. There are no analytics, advertising or third-party cookies anywhere on this site.

Who else is involved

Amazon Web Services — hosting, and Bedrock for the model.
Anthropic — the Claude model, accessed through Bedrock.
Zoho Mail — sends your sign-in email. They necessarily see your address and the message.

That's the whole list. Nobody's data is sold, and there are no marketing or analytics processors.

Your choices

Use it without an account. Then we hold nothing that identifies you beyond a salted hash that expires in two days.
Get a copy. Ask and we'll send everything tied to your address — which is a short list.
Delete it. Ask and we delete your account, address and balance. Any remaining credits go with it, so spend or refund them first.
Sign out any time to clear the cookie.

Children

The service isn't for under-16s, and photos of children shouldn't be uploaded — see the terms. We don't knowingly hold data about children; if you believe we do, tell privacy@sassysage.top and it'll be removed.

Changes and contact

If this page changes materially, the date at the top changes with it.

Privacy questions, data requests, and deletions: privacy@sassysage.top. For anything else, support@sassysage.top.