Privacy Policy

Last updated: October 11, 2026

Search Your Collection ("Search Your Collection," "we," "us," or "our") is operated by Gonzalo Lope Carrasco, an individual based in Spain. This Privacy Policy explains what information we collect when you use searchyourcollection.com and our related services (the "Service"), why we collect it, how it is used, and the choices you have.

If you have questions about this policy or want to exercise any of the rights described below, contact us at [email protected].

1. What the Service does

Search Your Collection lets you upload images, videos, and audio clips into "collections" and search them by meaning rather than filename or tags. To do this, each file is converted into a numeric representation (an "embedding") that captures what it depicts or contains. That embedding is used to rank search results.

Embeddings are computed with EmbeddingGemma 2, an open-weights embedding model from Google that we run ourselves. Embedding computation happens in one of two ways:

• On your device — whenever your browser supports it, the EmbeddingGemma 2 model runs locally (via WebGPU/WebAssembly). Your file (for videos and audio, frames or samples taken from it) is analyzed on your device and only the resulting embedding is sent onward.
• On our own server — if your device cannot run the model locally, the file (or frames or samples taken from it) is sent to a server we operate ourselves, which runs the same EmbeddingGemma 2 model, to compute the embedding. We do not send your images, videos, audio, or search queries to third-party AI providers (e.g., OpenAI or Google's hosted AI services) — this processing happens exclusively on infrastructure we control.

Search and ranking of results always happens in your browser, not on our servers.

2. Information we collect

2.1 Account information

When you create an account, we collect:

• Email/password sign-up: the email address and password you provide (your password is never stored in plain text — it is hashed by our authentication system).
• Sign in with Google: if you choose to sign in with Google, we receive your name, email address, and profile picture from Google, as authorized by you during the Google consent screen. We use this only to create and identify your account. See Section 8 for more on Google data.

2.2 Content you upload

• The files you upload to your collections — images (up to 25 MB each), videos (up to 50 MB each), and audio clips (up to 10 MB each) — stored in our cloud storage. For each video we also store a small preview image taken from it.
• The filename you upload the file with.
• A hash and file size of each file, used to detect duplicates.
• The computed embedding vector for each file, plus metadata about how it was generated (e.g., which model and whether it was computed on your device or on our server).

2.3 Billing information

If you subscribe to a paid plan, billing is handled entirely by Stripe (operating as merchant of record via Stripe Link). We never see or store your card number or other payment instrument details. We store only:

• Your current plan (Free, Pro, Unlimited, or Business).
• A Stripe customer ID and subscription ID, used to look up your billing status if you contact support.
• Your subscription renewal date.

2.4 Usage and quota data

We keep a running count of how many collections and files your account owns, so we can enforce the limits of your plan. We do not log your individual search queries or maintain a history of your searches.

2.5 Technical data

Like virtually all websites, our hosting and content-delivery providers (Cloudflare, Hetzner) automatically process standard web request data (such as IP address, browser type, and request timestamps) as part of delivering the Service and keeping it secure. We do not currently combine this with your account beyond what is necessary for security and abuse prevention.

2.6 Cookies and analytics

We do not use advertising or tracking cookies. Your session is kept using your browser's local storage rather than a cookie. Our pages load web fonts from Google Fonts, which involves your browser making a request directly to Google's servers (exposing your IP address to Google in the process). We use Cloudflare Web Analytics, a privacy-focused, cookie-free analytics service, to see aggregated traffic statistics such as page views, referring sites, countries, and browser types. It does not use cookies or local storage, does not fingerprint your device, and does not track you across sites; the data is not used for advertising and is not combined with your account.

3. How we use your information

We use the information described above to:

• Create and secure your account, and authenticate you.
• Store, process, and display your collections and search results.
• Compute embeddings of your files (locally where possible, or on our own server otherwise).
• Process payments and manage subscriptions.
• Enforce plan limits and prevent abuse (e.g., rate-limiting).
• Provide customer support.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information.

4. Who we share information with

We share information only with the service providers ("subprocessors") needed to run Search Your Collection, and only to the extent necessary:

We do not otherwise sell, rent, or share your personal information with third parties for their own marketing purposes. We may disclose information if required by law, to protect our rights, or to investigate fraud or security issues.

5. Where your data is stored

Your account data and uploaded files are stored on infrastructure located in the European Union. Because some of our service providers (such as Stripe and Google) operate globally, your information may be processed in other countries, including the United States. Where this happens, we rely on those providers' own compliance mechanisms (such as Standard Contractual Clauses) for international transfers.

6. Data retention and deletion

• You can delete any collection you own at any time from your dashboard; this immediately and permanently deletes that collection's files.
• You can download any file you have uploaded, at its original quality, from the collection view at any time.
• If your plan lapses or is downgraded and your collections exceed its limits, they stay viewable and downloadable but cannot be searched. Content that remains over the limit for 90 days or more may be deleted, as described in our Terms of Service.
• You can delete your whole account from your Account page. It asks for your password and for you to type `DELETE`, and then it is immediate and permanent: your account, your collections, your files, your share links, and any messages you have sent us through the contact form are all erased. There is no recovery period.
• Deleting your account cancels any active subscription. As set out in our Terms of Service, fees already paid are not refunded, including for the remainder of a billing period.
• Uploaded files are removed from storage as part of the deletion. For a very large account some files are removed by a scheduled cleanup within 24 hours rather than in the same instant; no record pointing at them remains in the meantime.
• Two things deliberately survive: a copy of a collection that another person imported from a share link is their data, stored in their account, and it stays with them (see our Terms of Service, Section 4a); and records that someone imported one of your share links are kept without your account, as an abuse-prevention log.
• You can also request deletion by emailing [email protected] instead, and we will act on verified requests within a reasonable time.
• We retain account and content data for as long as your account is active.

7. Your rights

If you are located in the European Economic Area, the UK, or another jurisdiction with similar data protection laws, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Receive a copy of your data in a portable format.
• Lodge a complaint with your local data protection authority (in Spain, the Agencia Española de Protección de Datos).

To exercise any of these rights, email [email protected].

8. Use of Google user data

If you sign in with Google, Search Your Collection's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We request only the minimum Google account information needed to create and authenticate your account (name, email address, and profile picture), and we do not use this information for advertising, and do not transfer it to third parties except as needed to provide the Service as described in this policy.

9. Children's privacy

Search Your Collection is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Security

We take reasonable technical and organizational measures to protect your data, including private-access cloud storage with signed, time-limited access tokens for uploaded files, and access controls restricting who can view or modify billing data. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you (e.g., by email or a notice on the Service).

12. Contact us

Search Your Collection is operated by Gonzalo Lope Carrasco (Spain). For any privacy question or request, email [email protected].