Privacy Policy

Last updated: May 24, 2026

1. Overview

FreeOCR ("we", "us", or "our") operates the website freeocr.xyz. This Privacy Policy explains how we collect, use, and protect your information when you use our OCR (Optical Character Recognition) service.

2. Data We Collect

Files you upload: When you use our OCR service, you upload images or PDF files for text extraction. These files are processed in real-time and deleted immediately after processing is complete. We do not store, archive, or retain any uploaded files.

OCR results: The extracted text is returned to you in your browser. We do not store or log the OCR output on our servers.

Usage data: We may collect anonymized usage statistics including:

• IP address (used solely for rate limiting and abuse prevention)
• File type and size (for service optimization)
• Timestamp of requests

3. How We Use Your Data

• To provide the OCR text extraction service
• To prevent abuse and enforce rate limits
• To monitor and improve service performance

4. Data Retention

Uploaded files are deleted immediately after OCR processing is complete. No copies are retained on our servers or in cloud storage. Usage logs (IP, timestamps) are retained for up to 30 days for security and rate-limiting purposes, then automatically purged.

5. Third-Party Services

We use the following third-party services:

• Cloud Storage: Files are temporarily stored in encrypted cloud storage during processing and deleted immediately after.
• Cloudflare: Used for CDN, DDoS protection, and security. Cloudflare may collect data per their privacy policy.

We do not sell, share, or transfer your data to any other third parties.

6. Cookies

We use minimal cookies necessary for service operation:

• login — Encrypted session identifier. Expires after 30 days. Used to maintain your session.
• verify_token — CAPTCHA verification token. Expires after 1 hour. Prevents repeated challenges.
• cf_clearance — Set by Cloudflare for security and bot protection. Expires after ~1 year.

We do not use advertising cookies, tracking cookies, or third-party analytics cookies. You can disable cookies in your browser settings, though this may affect service functionality.

7. California Consumer Privacy Act (CCPA)

Under the CCPA, California residents have the following rights:

• Right to Know: You have the right to know what personal information we collect. See Section 2 for details.
• Right to Delete: You have the right to request deletion of your personal information. Since we delete uploaded files immediately after processing and retain usage logs for only 30 days, most data is automatically removed.
• Right to Opt Out of Sale: We do not sell, share, or transfer your personal information to any third parties. There is nothing to opt out of.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise any of these rights, contact us at [email protected]. We will respond within 45 days.

8. General Data Protection Regulation (GDPR)

For users in the European Economic Area (EEA), United Kingdom, or Switzerland:

• Lawful Basis: We process your data based on legitimate interest (providing the OCR service) and consent (cookies).
• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate data.
• Right to Erasure: You may request deletion of your data. Files are auto-deleted after processing; logs are purged after 30 days.
• Right to Data Portability: You may request your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interest.
• Right to Withdraw Consent: You may withdraw cookie consent at any time by clearing your browser cookies.

Data transfers outside the EEA are protected by appropriate safeguards including Cloudflare's EU data processing commitments. Contact us at [email protected] to exercise any GDPR right.

9. Security

All data transmission is encrypted via HTTPS/TLS. Files are processed in isolated environments and deleted after completion. We implement industry-standard security measures to protect against unauthorized access.

10. Children's Privacy

Our service is not directed at children under 13. We do not knowingly collect personal information from children.

11. Your Rights

Since we do not store your files or OCR results after processing, there is no personal data to delete or modify. If you have questions about usage logs, contact us at the email below.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.

13. Contact

If you have questions about this Privacy Policy, contact us at: [email protected]