Privacy Policy

Last updated: May 21, 2026

This Privacy Policy explains how LoadQ processes personal data when you visit the website, create an account, upload images, run AI-assisted geolocation scans, buy Tokens or contact us. The service is designed for controlled image-location research and must not be used for unlawful surveillance, stalking, harassment or doxxing.

Controller

The controller is the operator of LoadQ identified in the Imprint. Privacy requests can be sent to [email protected]. General contact is available at [email protected].

Data We Process

Account data: email address, authentication identifiers, profile role, account status, Token balance, support messages and basic security logs.

Upload and case data: uploaded images, generated thumbnails, file names, file metadata, EXIF/GPS metadata where present, user-provided hints, scan settings, scan status, AI outputs, confidence values, evidence summaries, map coordinates, notes and case history.

Technical data: IP address, device and browser information, request timestamps, visited URLs, cookies, session tokens, error logs, rate-limit data and security events.

Billing data: selected Token package, payment status, Stripe checkout and customer identifiers, invoices where applicable, purchased Tokens and transaction records. LoadQ does not store full payment card numbers.

Purpose And Legal Basis

We process data to provide accounts, authenticate users, accept uploads, run geolocation scans, store case history, generate reports, manage Tokens, process payments, provide support, protect the service, prevent abuse and improve reliability.

Where GDPR applies, the legal bases are contract performance for account, scan, report and Token functionality; legitimate interests for security, abuse prevention, debugging, product improvement and fraud prevention; legal obligations for tax, accounting and compliance records; and consent where a specific consent is requested.

AI Processing And Accuracy

Before a scan starts, LoadQ asks for consent to process scan data with its AI investigation pipeline. When you consent and start a scan, LoadQ processes the selected photo, available image metadata and EXIF/GPS data, filename, file size, image dimensions, scan settings, optional context you provide, account identifiers and generated analysis results.

LoadQ uses this data to perform image geolocation, extract visual clues, read text and signs, compare possible locations, verify map and web evidence, generate reports, prevent abuse, debug errors and provide support.

To provide these features, LoadQ may share scan data with trusted AI, search and mapping providers including OpenAI, Google AI/Gemini, Google Cloud Vision, Google Maps/Street View, Brave Search or Google Custom Search, and Mapillary/OpenStreetMap. These providers are used for specialist analysis and verification, such as visual reasoning, OCR, maps, search results and street-level context.

These outputs are probabilistic and may be incomplete, outdated or wrong. Do not treat results as verified facts without independent review.

Processors And Infrastructure

We use service providers to operate LoadQ, including Supabase for authentication, database and private file storage; Apple and Google Play for app purchases and subscriptions; Stripe where web payments are available; Cloudflare for DNS, security, caching and traffic protection; hosting infrastructure for application delivery; analytics and ads measurement providers where consent is granted; and AI, search and mapping providers configured by LoadQ for analysis.

These providers process data only as needed to provide their services, subject to their own security and data-processing commitments. We expect third-party providers that process scan data to maintain comparable protection safeguards for the data they process for LoadQ. Some providers may process data outside your country. Where required, we rely on appropriate safeguards such as data processing agreements, standard contractual clauses or equivalent legal mechanisms.

Cookies And Local Storage

LoadQ uses cookies, browser storage and IndexedDB for authentication, preview access, app state, local case cache, security and PWA functionality. The browser cache is not the legal source of truth for account data; server-side records remain authoritative where synchronization is enabled.

Analytics, Ads Measurement And Consent

LoadQ uses Google Analytics 4 to understand aggregate website traffic, product usage and conversion events such as registrations, purchases and scan activity. Google Ads may import selected conversion events from Google Analytics 4. These services may process technical identifiers, page URLs, referrers, device/browser information and event data when you grant consent.

By default, analytics and advertising storage are disabled through Google Consent Mode. Non-essential analytics and ads measurement are only enabled after you accept them in the consent banner. You can reject non-essential tracking or choose analytics and ads measurement separately.

Your consent choice is stored locally in your browser under loadq:consent:v1. It does not contain your password, payment details or uploaded images. Clearing site data removes this choice and the banner will be shown again.

Review privacy preferences

Sharing

We do not sell uploaded images or account data. We share data with processors and service providers only where necessary for hosting, security, payment, analysis, support or legal compliance. We may disclose data if required by law, to enforce our terms, to protect users and the service, or to respond to valid legal requests.

Admin Access And Safety Review

Authorized administrators may access account data, uploads, scan results, logs and feedback when necessary for support, billing, security, debugging, abuse prevention, legal compliance and service improvement. Admin access is limited to operational need.

Retention

Uploaded images, thumbnails, scan results and case history are retained while your account uses the service unless deleted earlier through available product controls. Security logs are retained for a limited period based on operational need. Billing, tax and accounting records may be retained for legally required periods. Backups may persist for a limited time before rotation or deletion.

Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, receive a copy of your data, withdraw consent and lodge a complaint with a supervisory authority. We may need to verify your identity before acting on a request. Some deletion requests may be limited by legal, billing, security or abuse-prevention obligations. Account deletion requests can be started at /delete-account.

Security

We use technical and organizational measures such as HTTPS, private storage, authenticated access, short-lived internal tokens, access controls, rate limiting and Cloudflare protection. No online service can guarantee absolute security.

Children

LoadQ is not intended for children. Do not use the service if you are not legally able to enter into these terms or if your use would require parental consent that has not been obtained.

Changes

We may update this Privacy Policy when the service, providers, laws or operational practices change. Material changes will be reflected by updating the date above and, where appropriate, by additional notice.