Privacy Policy

Last updated: 27 October 2026

Short version: your photos and videos never leave your device. This free site shows ads from Google, which may use cookies and may personalise ads. In the EEA, UK and Switzerland Google's consent message asks you first, and you can opt out of personalised ads anywhere.

1. Who we are

Will It Flag? (willitflag.com) is an independent web tool that estimates whether a photo or video might be labeled as sensitive media on X (Twitter). Contact: contact@willitflag.com.

2. Your photos and videos

Photos and videos you choose are decoded and analysed entirely inside your browser on your device. They are never uploaded to us or anyone else, never stored, and never logged. The analysis result exists only in your open tab and is gone when you close it. The optional caption you type is used only to draw the post preview, and it is never sent anywhere.

How we keep photos away from other code on the page. The site loads advertising scripts, which run on the same page. To prevent them from seeing your photo or video:

• your photo, and every frame sampled from a video, is displayed only inside sandboxed preview frames with an isolated origin, which other page scripts can't read;
• a video is read frame by frame by our code from the file on your device, in a player that is never placed on the page;
• file selections, drag-and-drop and paste are handled by our code first, and are not passed on to other scripts;
• no web address or global variable pointing at your photo or video is ever exposed on the page;
• ad units are never displayed next to a photo or video that may be sensitive.

Remaining risk, stated plainly: these protections stop ordinary ad code from seeing your photo or video, but no website can technically guarantee that a script running on the same page could never interfere (for example, a compromised ad script that changes the page). Browser extensions you install can see everything on every page, including this one. The caption box is ordinary page text. Nothing about your photo or video is ever sent anywhere by our code.

3. What is stored on your device

You can clear all of it at any time in your browser's site settings.

4. Advertising (Google AdSense)

We use Google AdSense to show ads. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.

You can opt out of personalised advertising by visiting Google Ads Settings, or opt out of some third-party vendors' use of cookies for personalised advertising at www.aboutads.info. Learn how Google uses information from sites that use its services.

When ads load, your browser connects to Google's servers, which receive standard request data such as your IP address, browser type, the page address and cookies. They do not receive your photo or video, your result or your caption.

Personalised ads and your choices. Google may show personalised ads (based on your interests and previous visits to this and other sites) or non-personalised ads (based on context such as the page you're reading and your general location). Google decides which kind to show based on the choices below and the law where you are.

• EEA, UK and Switzerland: Google's consent message, a Google-certified consent management platform (CMP) that uses the IAB Transparency & Consent Framework, asks for your choices when you first visit. Google uses cookies or personalises ads only as you allow. If you don't consent, Google may still show non-personalised ads, which can use cookies for frequency capping, aggregated reporting and fraud prevention where the law allows.
• US states with privacy laws (for example California): Google's message gives you the option to opt out of the "sale" or "sharing" of personal information for targeted advertising. We don't sell personal information for money.
• Everywhere: you can turn off personalised ads from Google in Google Ads Settings, or from many ad companies at aboutads.info (US), youradchoices.ca (Canada) or youronlinechoices.eu (Europe).
• To review or change your choices later, use Privacy choices in the footer. Where Google's consent message applies, it opens the message again. You can also clear this site's cookies in your browser at any time.

This site has no consent banner of its own. The only consent message is Google's.

5. Hosting and model files

Our hosting provider (and, if configured, the Hugging Face model CDN) receives standard web request data, like your IP address and browser type, to deliver the site and model files, and may keep short-term logs for security. These requests contain only file names, never your photo or video.

6. Children

The site is not directed at children under 13 (under 16 in the EEA/UK), and we don't knowingly collect their personal information.

7. Legal bases and your rights

For visitors in the EEA/UK we rely on consent for advertising cookies and personalised ads, and on legitimate interests for basic site delivery and security. We hold no account, photo or video data about you. For information held by Google, use Google's tools linked above. For anything else, including access, deletion or objection requests under GDPR, UK GDPR, PIPEDA or US state laws, contact contact@willitflag.com. You may also complain to your local data protection authority.

8. Changes

We'll update this page if anything changes and revise the date above.