Privacy Policy

Last updated: 29 September 2026

PicReviver is a free tool that enhances and restores photographs. We built it to be private by design: we don't want your photos, and we delete them automatically. This policy explains exactly what happens to your data.

Your photos

• Photos you upload are used only to produce the enhanced result you asked for.
• Your original upload is deleted immediately after it has been processed, whether processing succeeds or fails.
• The enhanced result is stored temporarily so you can download it, and is automatically deleted 45 minutes after it is ready, on every tier. A 3D model is deleted 45 minutes after it is finished. The repair brush and Best Take send the result straight back to your browser and keep no copy.
• Uploads and results are never included in our backups. We do not sell or share your photos or use them to train any model, and we don't keep them longer than described above.
• If you use the Feedback button ("Report a problem"), a screenshot of the page goes with your report unless you untick the box, which is ticked by default. That screenshot can show your photo or result; we delete it after 30 days.
• If you tick “Also send my file and the result” in that window: the file you chose and the result of your job are stored for 30 days and used only to reproduce and fix the problem you reported. They are not shared, not included in our backups, and you can ask for earlier deletion at info@shinobitools.com. Basis: fixing the problem you reported (Art. 6(1)(f) GDPR); the box is ticked by default and you can untick it.
• No account is required, so your photos are never tied to an identity.

Files you choose to send us

Next to a result, you can click “Share these 2 files” to help us find mistakes our tests don’t catch. This is entirely optional and off by default.

• What we ask for: the one file you uploaded and the result we gave you, and nothing else: only the part we need: up to 30 seconds of audio, one page of a PDF, or an image with the location data (EXIF/GPS) removed.
• Faces: a separate checkbox, off by default, where you confirm the file shows faces and everyone in it agreed, with no children in it. Without it, faces are blurred or the file is refused.
• Why: to find mistakes our automatic tests don’t catch, and turn real ones into new test cases.
• Legal basis: your explicit consent (Art. 6(1)(a) and, for special-category data such as faces, Art. 9(2)(a) GDPR). For other people who may appear in your file, our legitimate interest with strict minimisation (Art. 6(1)(f) GDPR).
• How long: at most 30 days, then it is deleted automatically.
• Withdraw any time: you get a one-time code on screen. Enter it whenever you like and we delete the pair, its label and the consent record immediately: as easy as giving it.
• Who sees it: one person on our team, and nothing else. A local AI model only adds a label for the kind of mistake, never a description of a person, and it never leaves our own computer.
• What we never do: we never store your IP address, filename or email with it; never train or fine-tune any model on it; never share it with anyone else, publish it, or offer it through the API; and never use it to identify or score anyone.

Information we collect

We keep the service deliberately minimal. The tools never ask for your name, e-mail address or an account; you only give us those if you use the contact form or join the e-mail list. Our servers may process basic technical data needed to run any website (such as your IP address and browser type) to deliver the service, prevent abuse, and keep the tool available. This is not used to identify you personally.

Cookies and advertising

When ads are shown here, third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google’s use of advertising cookies enables it and its partners to serve ads based on those visits. You can opt out of personalised advertising in Google’s Ads Settings, and opt out of some other vendors’ advertising cookies at www.aboutads.info.

PicReviver is kept free through advertising. We use Google AdSense to show ads. Google and its partners may use cookies and similar technologies to serve ads based on your prior visits to this and other websites.

• Third-party vendors, including Google, use cookies to serve ads based on someone's visits to this site and/or other sites on the internet.
• Google's use of advertising cookies enables it and its partners to serve ads based on your visits. You can opt out of personalised advertising by visiting Google Ads Settings.
• You can learn how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites.
• For more choices about third-party advertising cookies, visit aboutads.info/choices or youronlinechoices.eu.

Who we are, why we process data, and for how long

PicReviver is run by ShinobiTools, registered with the KvK (Dutch Chamber of Commerce) under number 42147182. You can reach us at hello@shinobitools.com.

• Processing the photo you upload, so you get the result you asked for. Legal basis: performing the service you request (Art. 6(1)(b) GDPR). Your upload is deleted right after processing; the result is deleted 45 minutes after it is ready, on every tier (free, e-mail pass and paid pass). A 3D model is also deleted 45 minutes after it is finished.
• Daily limits, security and usage counts, to keep the free tools available and stop abuse. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). These counts only hold your IP address in hashed form and are deleted after 60 days.
• The contact form, so we can answer your message. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Messages are kept for at most 180 days.
• "Report a problem" (the Feedback button), with an optional screenshot of the page. The screenshot box is ticked by default and you can untick it. We use the report to see the problem you describe. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Screenshots are deleted after 30 days.
• The e-mail list for the free monthly pass. Legal basis: your consent (Art. 6(1)(a) GDPR). We keep your address until you unsubscribe.
• Advertising cookies, only with your consent, which you give or refuse in the cookie banner.
• Google Fonts: the typeface used on this site is loaded from Google's servers (fonts.googleapis.com and fonts.gstatic.com) as a page opens, so Google receives your IP address and browser details with that request. We use it to show the pages in the intended typeface. See Google's privacy policy.
• Microsoft Clarity: a script from clarity.ms that records how the pages are used, such as clicks and scrolling, so we can see where a page gets in the way. It is loaded only after you agree to it in the cookie banner. Where the cookie banner reports that consent is not required for your location, it is loaded without that step. See Microsoft's privacy statement.
• YouTube: the demo videos on some pages are played by YouTube (Google). Nothing is loaded from the YouTube player until you press play; then the video is loaded from youtube.com, which receives your IP address and may set its own cookies. On some video pages the preview picture is loaded from YouTube's image server (i.ytimg.com) when the page is shown. See Google's privacy policy.
• jsDelivr: when you create a 3D model, the script that displays it is loaded from jsDelivr (cdn.jsdelivr.net), a public file-delivery network, which receives your IP address with that request.
• Cloudflare: the connection to this site runs through Cloudflare, which passes the traffic on to us and provides security. Cloudflare sees your IP address and the pages you request, and may set a cookie of its own, for example when it checks that a visitor is not a bot. See Cloudflare's privacy policy.
• Stripe: if you buy a pass, you pay on Stripe's own checkout page, not ours. Your card details go to Stripe under its privacy policy, and we never see them. We receive confirmation that the order was paid, its order number and the e-mail address you entered.

Where it runs: your photos are processed on computers we operate ourselves. Some heavy jobs run on another of our own computers rather than on the web server itself. Your photo is never sent to a third-party service.

Backups: Uploads and results are never included in our backups.

Your rights: you can ask us for access to your data, or to correct or delete it; you can object to processing and withdraw consent at any time. You can also lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or with the supervisory authority in your own country.

Your rights (GDPR)

If you are in the European Economic Area or the UK, you have rights over your personal data, including access, correction, and deletion. Because we don't hold accounts and delete photos automatically, there is normally nothing stored about you to retrieve. For consent to personalised ads, we use Google's certified consent tools where required. To exercise any right, contact us below.

Children

PicReviver is not directed at children under 13, and we do not knowingly collect data from them.

Changes

We may update this policy as the service grows. The "last updated" date above always reflects the current version.

Email list

You can leave your email address to get a free 12-hour Pro pass, and another one every month: what it unlocks changes from month to month. That is the only reason we ask for it. The tools work without it: nothing here needs an account, and nothing is hidden behind giving us your address.

We store the address, when you signed up, which site you signed up on, the IP address you used, and the exact sentence that was shown next to the button when you asked for the pass. That last part is the proof that you asked for this, which is what the law expects us to keep. We only ever email an address after you click the confirmation link in the first email, so nobody can put someone else on the list.

The emails themselves are delivered by Resend (Resend, Inc.), which sees the address in order to deliver the message and nothing else. We keep your address until you unsubscribe.

Every email has an unsubscribe link that works in one click, without logging in. Use it and your address comes off the list straight away and we stop e-mailing you; we keep a one-way hash of it so we can show that we honoured your request. We never sell, rent or share the list, and we don't use it to follow you around the web.

Contact

Questions about your privacy? Email hello@shinobitools.com.