Privacy Policy

1. Introduction

Welcome to inkPEEK ("we", "us", or "our"). inkPEEK is a free web-based tool that lets you preview how a tattoo design would look on your body before getting inked. This Privacy Policy explains what information we collect, how we use it, and what choices you have. By using inkPEEK, you agree to the practices described in this policy.

inkPEEK is operated from the Republic of Korea. The data controller responsible for the processing described here is inkPEEK (contact: inkpeek@gmail.com).

2. Information We Collect

We collect the following limited information:

• Images you upload. Tattoo design images and body photos you upload to use the service. Body photos may incidentally contain identifying features (such as your face or distinctive markings). We treat all uploaded images as sensitive and handle them as described in Section 3.
• Automatically collected technical data. IP address, browser type, device type, operating system, approximate region, and pages visited — collected via Vercel Analytics and Vercel Speed Insights for performance and usage statistics. Some of this data (such as IP address) may be considered personal data under laws like the GDPR.
• Cookies and similar technologies. Set by Google AdSense and our analytics providers for ad delivery and aggregated usage measurement. See Section 5.

We do not require account creation and we do not ask you to provide identifiers such as your name, email address, phone number, or postal address.

3. How We Handle Your Images

This is the most important section. Please read carefully:

• To remove a tattoo design's background and to read the depth of a body photo, your image is sent over an encrypted HTTPS connection to our serverless functions, which forward it to Replicate, a third-party AI processing provider, to be processed.
• The skin-shape analysis of your body photo runs entirely in your browser and is never uploaded anywhere.
• inkPEEK does not store your images. Our serverless functions hold them only in memory for the duration of a single request — we never write them to any database or persistent storage we control.
• On Replicate, the prediction's input and output are automatically deleted after about one hour (per Replicate's data-retention policy).
• The result (a background-removed PNG or depth map) is returned to your browser and kept only in your browser session, then automatically cleared when you close the tab.
• No human at inkPEEK reviews your uploads. We share your images only with Replicate, and only to perform the processing you requested — we do not sell them or use them for any other purpose.

4. Third-Party Services

We use the following third-party services. Each has its own privacy policy:

• Google AdSense — Displays advertisements. Uses cookies, including the DART cookie. Google Privacy Policy
• Vercel— Hosts our website and the serverless functions that pass your image to the processing provider. Also provides aggregated, privacy-friendly Analytics & Speed Insights. Images are handled in memory only and are not stored by us. Vercel Privacy Policy
• Replicate— AI processing for background removal and depth estimation. Your uploaded tattoo designs and body photos are sent to Replicate to be processed; per Replicate's policy, prediction inputs and outputs are automatically deleted about one hour after processing. Replicate Privacy Policy

5. Cookies and Advertising

inkPEEK uses cookies and similar technologies primarily through Google AdSense:

• Google, as a third-party vendor, uses cookies to serve ads on our site.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to inkPEEK and other sites on the Internet.
• For visitors in the European Economic Area (EEA), the United Kingdom, and Switzerland, we use a Google-certified Consent Management Platform (CMP) to obtain your consent before non-essential cookies (including advertising cookies) are set. You can change your choices at any time via the consent banner.
• You may opt out of personalized advertising at any time by visiting Google Ads Settings or www.aboutads.info.
• You can also disable cookies in your browser settings; doing so may affect site functionality.

6. Data Sharing

We do not sell, trade, or rent your personal information to third parties. The only times your data is processed outside our direct control are:

• When handled by our infrastructure and service providers (Vercel, Replicate, Google) strictly to operate the service — for example, sending your image to Replicate to process it.
• When required to comply with applicable laws, regulations, or valid legal requests.

7. Data Retention

• Uploaded images: Not stored by inkPEEK — held in memory only for the duration of the request. They are sent to Replicate for processing, where the prediction input and output are automatically deleted about an hour later.
• Processed results:Stored only in your browser's session storage, cleared when you close the tab.
• Analytics data: Retained according to the policies of Vercel Analytics and Vercel Speed Insights.
• Cookies: Retained according to the policies of the respective providers and your own browser settings.

8. Your Rights

You generally have the right to:

• Opt out of personalized advertising at Google Ads Settings.
• Disable cookies through your browser settings or our cookie consent banner (where shown).
• Request information about how your data is processed by contacting us at inkpeek@gmail.com.

Because we do not store your uploaded images and do not maintain user accounts, in most cases there is no personal data on our side to access, correct, or delete.

9. Rights of Users in the European Economic Area, the United Kingdom, and Switzerland (GDPR / UK GDPR)

If you are located in the EEA, the UK, or Switzerland, you have the following rights under the General Data Protection Regulation and equivalent laws:

• The right to Access the personal data we hold about you.
• The right to Rectify inaccurate personal data.
• The right to Erasure ("right to be forgotten").
• The right to Restrict or object to processing, including objecting to processing based on legitimate interests.
• The right to Data portability .
• The right to Withdraw consent at any time, where processing is based on consent (for example, advertising cookies).
• The right to Lodge a complaint with your local data protection authority.

Our legal bases for processing are: (i) your consent for advertising cookies and similar technologies; (ii) our legitimate interests in operating, securing, and improving the service (aggregated analytics, fraud prevention); and (iii) performance of a service you actively request (image processing).

To exercise any of these rights, contact us at inkpeek@gmail.com.

10. Rights of California Residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you the right to:

• Know — what categories of personal information we collect and how we use them.
• Access — the personal information we hold about you.
• Delete — personal information we hold about you, subject to certain exceptions.
• Opt out — of the "sale" or "sharing" of personal information for cross-context behavioral advertising.
• Non-discrimination — for exercising your privacy rights.

We do not sell personal information for money. However, the use of advertising cookies by Google AdSense may be considered "sharing" for cross-context behavioral advertising under the CPRA. You can opt out at Google Ads Settings and via our cookie consent banner (where shown).

11. Rights of Users in the Republic of Korea (PIPA)

inkPEEK is operated from the Republic of Korea and complies with the Personal Information Protection Act (PIPA, 개인정보보호법). Korean users have the right to access, correct, delete, and suspend the processing of their personal information, and to lodge a complaint with the Personal Information Protection Commission (개인정보보호위원회) or the Korea Internet & Security Agency Personal Information Infringement Report Center (privacy.kisa.or.kr, 국번없이 118).

12. Children's Privacy

inkPEEK is not intended for children under the age of 13 (or the equivalent minimum age in your jurisdiction, such as 14 in the Republic of Korea or 16 in some parts of the EEA). We do not knowingly collect data from anyone below that age. If you believe a child has used our service, please contact us and we will take appropriate action.

13. International Data Transfers

inkPEEK is operated from the Republic of Korea, and our service providers (Vercel, Replicate, Google) operate globally. By using our service, you understand that your data may be processed in the Republic of Korea, the United States, the European Union, and other countries where our service providers operate. Where required, our providers rely on lawful transfer mechanisms such as Standard Contractual Clauses.

14. Security

We use HTTPS for all data in transit. inkPEEK does not store your images — they are handled in memory and forwarded to Replicate for processing, where prediction data is automatically deleted about an hour later. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be announced on the site. Continued use of inkPEEK after changes means you accept the updated policy.

16. Contact

For any questions, concerns, or requests regarding this Privacy Policy or your data, please contact: