Privacy Policy

Last updated: May 8, 2026

Data minimization at a glance

✓ We do NOT store

  • Photos you upload (processed in-memory, sent to Google Gemini, then discarded)
  • Names, emails, or passwords — no registration required
  • Your browsing history outside our site
  • Cross-site advertising profiles built by us

⚠ What we DO store (the minimum we need)

  • Device fingerprint + IP — for rate-limiting the free tier
  • Identification result text + timestamp — for service quality monitoring
  • Aggregated analytics (Google Analytics, Yandex Metrika)
  • AdSense cookies set directly by Google (see Section 1.5)

This Privacy Policy explains how Animal Identifier (“we”, “our”, or “the Service”), available at ai-animal-identifier.vercel.app, collects, uses, and protects information about its visitors and users (“you”). By using the Service, you agree to the practices described below.

1. Information We Collect

1.1 Photos you upload — NOT stored

When you upload a photo for identification, the image is held in memory only for the duration of the request, transmitted to Google’s Gemini API for AI processing, and then discarded. We never write the photo to our database, file storage, or any persistent layer. Google’s Gemini API does not retain content for model training (per Google’s API terms).

1.2 Device fingerprint and IP address

For each identification request we compute a device fingerprint (browser, screen size, timezone) and read your IP address. Both are written to our database for two purposes only:

  • Rate-limit counters — to enforce the free-tier daily limit.
  • Request metadata — to monitor service quality and detect abuse.

Under GDPR/152-FZ, IP addresses can constitute personal data. We do not link this data to a name or email and we do not use it to build cross-site advertising profiles.

1.3 Authentication and account data

If you sign in, we use Firebase Authentication (Google LLC) to manage your session. Account metadata is stored in Firebase Firestore. We do not collect a password (we rely on third-party identity providers).

1.4 Usage analytics

We use the following analytics tools:

  • Google Analytics 4 — aggregated page views, geography, device class.
  • Yandex Metrika — aggregated traffic and behavior metrics for Russian-speaking users.
  • Vercel Analytics — performance and traffic metrics from our hosting provider.

1.5 Advertising

We display advertisements via Google AdSense. Google and its partners use cookies and similar technologies to serve ads based on your prior visits to this and other sites. You may opt out of personalized advertising at Google Ads Settings or via aboutads.info.

2. How We Use Information

  • To provide and maintain the animal-identification feature.
  • To enforce free-tier daily usage limits.
  • To detect abuse, fraud, and spam.
  • To analyze and improve the Service.
  • To display advertising that supports the free tier.
  • To comply with legal obligations.

3. Cookies and Similar Technologies

We use the following categories of cookies:

  • Essential — for authentication, theme preference, and CSRF protection. The Service does not function without these.
  • Analytics — Google Analytics, Yandex Metrika, Vercel Analytics.
  • Advertising — Google AdSense (`__gads`, `__gpi`, `IDE`/`DSID` from doubleclick.net).

You can disable cookies in your browser settings. Disabling essential cookies will break authentication and rate limiting.

4. Third-Party Service Providers

We share data only with the providers we depend on technically. Each provider is bound by its own privacy policy:

We do not sell or rent your personal data to third parties.

5. Data Retention

  • Photos: never persisted — held only in memory during the request, then discarded.
  • Rate-limit counters: kept only as long as the 24-hour rolling window requires; older request timestamps are auto-cleaned on each new request.
  • Identification metadata: currently retained for service quality. You may request deletion of records associated with your fingerprint+IP at any time (see Section 8) and we will purge them within 30 days.
  • Analytics: anonymized, retained per the provider’s default policy (typically 14–26 months for Google Analytics).

6. International Data Transfers

Our service providers process data in the United States and the European Union. Where applicable, transfers rely on Standard Contractual Clauses adopted by the European Commission.

7. Children’s Privacy

The Service is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us at contact email and we will delete it.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Request correction or deletion
  • Object to or restrict processing
  • Data portability
  • Withdraw consent at any time
  • Lodge a complaint with your local data-protection authority

To exercise any of these rights, email contact email.

9. Security

We use HTTPS, Content Security Policy, and standard security headers. No system is perfectly secure; we cannot guarantee absolute security but follow industry best practices.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent change. Continued use of the Service after an update constitutes acceptance of the revised policy.

11. Contact

For any privacy-related inquiry, contact us at contact email.