Privacy

The short version

DetectMark never retains the text you paste or the images you drop. There is no account and no database. The scanning and cleaning code runs in your browser tab, on your device, and the results never leave it. The single exception is the optional OpenAI verification on the Image tab, described below, which runs only after you approve it, and even then nothing is stored.

What happens to your content

Text you paste stays in the page's memory for as long as the tab is open. It is not written to disk, not stored in your browser's local storage, and not transmitted anywhere.

Images you select are read as a local file object. Parsing, metadata extraction and cleanup all happen in the tab, and a cleaned export is generated locally and handed to your browser's download mechanism.

Closing or reloading the tab discards everything. There is nothing to delete afterwards, because nothing was kept.

What "0 B uploaded" means

It means precisely this: zero bytes of your text or your image have been sent to DetectMark or to any third party during the scan. If you run the optional OpenAI check on an image, or the optional OpenAI rewrite on text, the counter changes to the exact size of what was sent, and stays that way for the rest of the session.

It does not mean the page made no network requests at all. The browser loads the page's HTML, JavaScript, CSS and font files like any website, and the Image tab additionally loads the Content Credentials module and its WebAssembly file the first time you use it. Those files are served from this domain. None of them carry your content in either direction.

Cookies, storage and analytics

DetectMark sets no cookies. It writes nothing to local storage, session storage or IndexedDB. The site's own code ships no analytics script, no tag manager, no session replay, and no fingerprinting. One measurement layer exists at the hosting level: Cloudflare's cookieless Web Analytics beacon, injected by the host into pages it serves. It records page-load timing, not page content. It sets no cookies, does no cross-site tracking, and cannot see what you paste or scan. That is the whole list. Nothing on this site can read or transmit your content.

Hosting

The site is served by Cloudflare as static files, plus two relay endpoints for the optional OpenAI requests described below. Like any host, Cloudflare processes the network requests needed to deliver a page and may retain standard server-side request records, such as an IP address, a user agent and a requested path, as part of operating its network. That is request-level infrastructure data about page loads, and it is separate from anything you paste or drop into the tool.

Advertising

No advertising is served today. The layout reserves places where an ad could go, and with no ad provider configured those slots render at zero height with no request made.

If advertising is ever enabled, this page will name the network and describe what it sets before it goes live.

External requests: verification and rewrite

Two optional operations send your content to OpenAI, and only after you confirm a dialog that states exactly what leaves and where it goes. Neither ever runs automatically.

The first is verification. Some watermarks can only be verified by the provider that created them, and one such check is available today: OpenAI's Content Provenance API, which verifies the SynthID watermark and the Content Credentials that OpenAI embeds in its own images.

It runs only when you click Verify with OpenAI on an image result and then confirm in a dialog that states the file name, the exact byte count and the destination. What is sent is the original image you selected, under a generic file name, and nothing else: no account, no page data, no other files. It is never sent automatically, and DetectMark never sends a cleaned copy.

The file travels through a relay endpoint on this domain, because the key for OpenAI's API has to stay on a server rather than in your browser. The relay forwards the bytes to api.openai.com and returns OpenAI's answer. It does not store the file, does not write its contents to a log, and keeps nothing after the response. OpenAI's handling of the file is governed by OpenAI's Services Agreement, and OpenAI states that this endpoint is not eligible for its zero data retention option.

The second is the rewrite. After a text scan you can ask for a full rewrite through OpenAI's API, which is the one published way to change a statistical text watermark. The dialog states the character count and the exact byte count; what is sent is the text as it stands in the tool, and nothing else. It travels through a second relay endpoint on this domain that forwards it to api.openai.com under a dedicated, budget-capped key, keeps nothing, and returns the rewrite. OpenAI does not use API content to train its models and keeps abuse-monitoring logs for up to 30 days. The rewrite is shown with a count of how much wording changed and no claim about what that removed.

The upload counter records the exact bytes sent, for either operation.

Children

DetectMark is a general-purpose utility with no account system and collects no personal information from anyone, including children.

Contact

Questions about this page or a correction to report: support@danielandersonsoftware.com.

Changes

Material changes to this page will be dated at the top. The date above reflects the last review.