Skip to main content
C2PA Viewer

Privacy Policy

Last Updated: April 3, 2026

1. Introduction

Welcome to C2PA Viewer. We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website and services. Our core privacy promise is simple: we do not store your files. All C2PA data processing happens directly in your browser.

2. Data We Collect

C2PA Viewer is designed to respect your privacy from the ground up. Here's a breakdown of the data we handle:

  • Uploaded Files: We do not upload, store, or transmit your files to our servers. When you select a file, it is processed locally in your web browser. It never leaves your device.
  • C2PA Data: The C2PA manifest data extracted from your file is also processed locally. We do not log, store, or analyze this information.
  • Usage Analytics: We use PostHog to collect anonymous usage data such as pages visited and interaction events (e.g., file type uploaded, whether a C2PA manifest was found). File names are never sent to analytics. PostHog is configured with memory-only persistence, meaning no cookies or local storage are used — analytics data exists only in browser memory and is discarded when you close the page. IP address collection is disabled. This data is processed by PostHog Inc. and subject to their privacy policy.

3. How We Use Your Data

The limited data we collect is used for the following purposes:

  • To provide and maintain our service, allowing you to view C2PA metadata from your files.
  • To improve our website and services by understanding how users interact with our tool.
  • To ensure the security and stability of our platform.

4. Data Security

Since we do not store your files or personal C2PA data, the risk of a data breach is minimized. All processing occurs on the client-side (your browser), which is the most secure way to handle sensitive file information. We implement standard security measures to protect our website and any anonymous analytics data we collect.

5. Your Rights

You have the right to understand how your data is used. As we do not collect personal information, many data protection rights (such as access, rectification, or erasure) are not applicable in the traditional sense. However, you have the right to:

  • Use our service with the assurance that your files are not being stored.
  • Opt out of analytics tracking by using your browser's built-in ad/tracker blocking features or any content blocker extension.
  • California residents (CCPA/CPRA): You have the right to know what personal information is collected about you, to request deletion, and to opt out of sharing your data with third parties. Our analytics use memory-only persistence with no cookies, no IP collection, and no cross-site tracking. If you have concerns, please contact us.

6. Third-Party Services

We use PostHog (provided by PostHog Inc.) to understand how visitors use this site. Our PostHog integration is configured with the following privacy-preserving settings:

  • No cookies or local storage: Analytics use memory-only persistence. No data is saved to your device.
  • No IP collection: Your IP address is not captured or stored.
  • No session recording: We do not record screen activity or user sessions.
  • No autocapture: Only explicitly defined events are tracked.

We do not share data with advertisers. PostHog's privacy policy is available at posthog.com/privacy.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically for any changes.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us.