Privacy Policy

Last updated: July 28, 2026

Search Your Collection ("Search Your Collection," "we," "us," or "our") is operated by Gonzalo Lope Carrasco, an individual based in Spain. This Privacy Policy explains what information we collect when you use searchyourcollection.com and our related services (the "Service"), why we collect it, how it is used, and the choices you have.

If you have questions about this policy or want to exercise any of the rights described below, contact us at [email protected].

1. What the Service does

Search Your Collection lets you upload images into "collections" and search them by meaning rather than filename or tags. To do this, each image is converted into a numeric representation (an "embedding") that captures what it depicts. That embedding is used to rank search results.

Embedding computation happens in one of two ways:

• On your device — whenever your browser supports it, the embedding model runs locally (via WebGPU/WebAssembly). The image is analyzed on your device and only the resulting embedding is sent onward.
• On our own server — if your device cannot run the model locally, the image is sent to a server we operate ourselves to compute the embedding. We do not send your images or search queries to third-party AI providers (e.g., OpenAI) — this processing happens exclusively on infrastructure we control.

Search and ranking of results always happens in your browser, not on our servers.

2. Information we collect

2.1 Account information

When you create an account, we collect:

• Email/password sign-up: the email address and password you provide (your password is never stored in plain text — it is hashed by our authentication system).
• Sign in with Google: if you choose to sign in with Google, we receive your name, email address, and profile picture from Google, as authorized by you during the Google consent screen. We use this only to create and identify your account. See Section 8 for more on Google data.

2.2 Content you upload

• The image files you upload to your collections (up to 25 MB each), stored in our cloud storage.
• The filename you upload the image with.
• A hash and file size of each image, used to detect duplicates.
• The computed embedding vector for each image, plus metadata about how it was generated (e.g., which model and whether it was computed on your device or on our server).

2.3 Billing information

If you subscribe to a paid plan, billing is handled entirely by Stripe (operating as merchant of record via Stripe Link). We never see or store your card number or other payment instrument details. We store only:

• Your current plan (Free, Pro, Unlimited, or Business).
• A Stripe customer ID and subscription ID, used to look up your billing status if you contact support.
• Your subscription renewal date.

2.4 Usage and quota data

We keep a running count of how many collections and images your account owns, so we can enforce the limits of your plan. We do not log your individual search queries or maintain a history of your searches.

2.5 Technical data

Like virtually all websites, our hosting and content-delivery providers (Cloudflare, Hetzner) automatically process standard web request data (such as IP address, browser type, and request timestamps) as part of delivering the Service and keeping it secure. We do not currently combine this with your account beyond what is necessary for security and abuse prevention.

2.6 Cookies and analytics

We do not use advertising or tracking cookies. Your session is kept using your browser's local storage rather than a cookie. Our pages load web fonts from Google Fonts, which involves your browser making a request directly to Google's servers (exposing your IP address to Google in the process). We may in the future add privacy-focused, cookie-free analytics (such as Plausible) that report aggregated traffic statistics without tracking individuals across sites; if we do, this policy will be updated first.

3. How we use your information

We use the information described above to:

• Create and secure your account, and authenticate you.
• Store, process, and display your collections and search results.
• Compute image embeddings (locally where possible, or on our own server otherwise).
• Process payments and manage subscriptions.
• Enforce plan limits and prevent abuse (e.g., rate-limiting).
• Provide customer support.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information.

4. Who we share information with

We share information only with the service providers ("subprocessors") needed to run Search Your Collection, and only to the extent necessary:

We do not otherwise sell, rent, or share your personal information with third parties for their own marketing purposes. We may disclose information if required by law, to protect our rights, or to investigate fraud or security issues.

5. Where your data is stored

Your account data and uploaded files are stored on infrastructure located in the European Union. Because some of our service providers (such as Stripe and Google) operate globally, your information may be processed in other countries, including the United States. Where this happens, we rely on those providers' own compliance mechanisms (such as Standard Contractual Clauses) for international transfers.

6. Data retention and deletion

• You can delete any collection you own at any time from your dashboard; this immediately and permanently deletes that collection's images.
• You can download any image you have uploaded, at its original resolution, from the collection view at any time.
• If your plan lapses or is downgraded and your collections exceed its limits, they stay viewable and downloadable but cannot be searched. Content that remains over the limit for 90 days or more may be deleted, as described in our Terms of Service.
• Full account deletion is not yet self-service. Until it is, you can request deletion of your account and all associated data by emailing [email protected]; we will act on verified requests within a reasonable time.
• We retain account and content data for as long as your account is active. If you request deletion, associated collections and images are removed as part of that process.

7. Your rights

If you are located in the European Economic Area, the UK, or another jurisdiction with similar data protection laws, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Receive a copy of your data in a portable format.
• Lodge a complaint with your local data protection authority (in Spain, the Agencia Española de Protección de Datos).

To exercise any of these rights, email [email protected].

8. Use of Google user data

If you sign in with Google, Search Your Collection's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We request only the minimum Google account information needed to create and authenticate your account (name, email address, and profile picture), and we do not use this information for advertising, and do not transfer it to third parties except as needed to provide the Service as described in this policy.

9. Children's privacy

Search Your Collection is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Security

We take reasonable technical and organizational measures to protect your data, including private-access cloud storage with signed, time-limited access tokens for uploaded files, and access controls restricting who can view or modify billing data. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you (e.g., by email or a notice on the Service).

12. Contact us

Search Your Collection is operated by Gonzalo Lope Carrasco (Spain). For any privacy question or request, email [email protected].