Privacy policy

Who is responsible

silvabokis operates Image Tools. For privacy questions or requests, email colin.irwin@silvabokis.com.

Free image recovery

Free image recovery does not require an email address or account. We use an essential, short-lived signed browser cookie to apply the free-recovery limit. The database retains only a one-way hash of that random browser identifier; each operational claim expires after 72 hours and a scheduled process deletes expired claims daily.

Images and website information

For a single-image recovery, we retrieve the public image address you submit and return the recovered file to your browser. The current file is held temporarily in the page’s memory, not in a cookie or browser local storage. Closing or reloading the page discards that in-page copy. Files you download remain on your device until you delete them.

For whole-site recovery, we retrieve public pages to confirm the Squarespace website identity and discover images. We save your submitted and canonical site addresses, Squarespace website ID and validation evidence, page addresses, scan progress, discovered image addresses, where images appear, and recovery outcomes. Image checks can also record format, dimensions, file size, filename and processing time. Where delivery checking is enabled, a remote browser checks selected public pages and records image delivery and display measurements.

Recovery history and temporary ZIPs

Your saved sites, recovery reports and pass records remain in your account after a seven-day pass expires so you can return to your history and purchase a new pass. These records are not automatically deleted after 30 days and currently have no fixed automatic deletion period. You can request deletion using the contact details below.

Whole-site ZIPs are stored temporarily in private Cloudflare storage. The latest ZIP for each recovery set remains available until three days after an active recovery pass ends; creating a replacement ZIP removes access to the earlier one. Temporary files are removed through storage cleanup. Expiry stops new downloads from Image Tools; ZIPs you have already downloaded remain on your device. Retrieved page HTML and checking screenshots are not retained as part of your saved recovery history.

Sign-in and payments

Supabase uses your email address to send a requested sign-in link and maintain your secure Image Tools session. This applies to all signed-in users, including customers and testers. Sign-in emails are service messages, not marketing. An optional, unticked marketing checkbox beside the sign-in form is separate and is never required to use Image Tools.

Stripe processes payments for recovery passes. We send the details needed to create your checkout, including your email address and purchase reference, and keep purchase status, amount, site association and pass expiry in Image Tools. Payment card details are entered with Stripe, not stored by Image Tools. A recovery pass is a one-time purchase, not a recurring subscription.

Analytics

When enabled, Google Analytics loads only after you accept analytics cookies. It provides usage information such as general page categories, counts, outcomes, errors and device information. Our application events exclude submitted addresses, filenames, Squarespace website IDs, email addresses, individual recovery IDs, URL query strings and referring URLs. Google receives technical connection information when its tag is used. Withdrawing consent stops further collection; it does not remove information already collected. See the cookie policy for details and controls.

Service providers

The service uses Vercel for application hosting, Supabase for authentication and saved recovery records, Cloudflare for ZIP preparation and temporary private storage, and Stripe for payments. When enabled and accepted, Google Analytics processes usage analytics. Providers delivering requested service emails or separately consented marketing emails process your email address for that purpose.

Your choices

You may decline analytics and marketing without losing access to the core recovery service. To request access, correction or deletion, object to processing, or withdraw marketing consent, email colin.irwin@silvabokis.com.