Zero-Knowledge Architecture & Privacy Policy
Effective Date: September 12, 2026. This policy establishes the technical, legal, and operational commitments governing data privacy on WRemove (wremove.com).
01. Data Protection by Design and by Default (GDPR Article 25)
Under Regulation (EU) 2016/679 (General Data Protection Regulation), Article 25 mandates that data controllers implement technical and organizational measures designed to implement data protection principles effectively.
WRemove satisfies and exceeds GDPR Article 25 requirements by implementing a Zero-Ingestion Architecture:
- No user files (photos, PDFs, images, metadata) are transmitted across the network to WRemove servers.
- All parsing, neural network inference, and binary file operations occur locally inside your client’s browser memory (V8/WebAssembly/WebGPU).
- No personal data processing agreements (DPA) or Standard Contractual Clauses (SCC) are required because no international data transfer takes place.
02. Zero Data Retention Guarantee
No Backend Databases or Buckets
WRemove operates zero cloud storage buckets (Amazon S3, Cloudflare R2, Google Cloud Storage) and zero databases for user media. There is no storage infrastructure capable of receiving your media.
Ephemeral In-Memory Lifecycle
All temporary buffers exist exclusively in volatile client RAM during the active browser session. When the tab or browser window is closed, all allocated memory is permanently cleared by the garbage collector.
03. Telemetry, Cookies & Analytics Disclosure
We believe privacy tools must not track their users. WRemove adheres to the following telemetry policies:
No Tracking Cookies
We do not set persistent advertising cookies, cross-site trackers, or third-party behavioral analytics.
No Digital Device Fingerprinting
We do not probe canvas hash fingerprints, audio API contexts, or device serials to build user profiles.
Static Cloudflare Pages Delivery
Our static edge hosting serves only compiled web assets (HTML, CSS, WASM binaries) through Cloudflare Pages global CDN with strict COOP/COEP isolation.
04. CCPA & CPRA Compliance
Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
- Do Not Sell or Share My Personal Information: WRemove does not sell, rent, or share personal data or uploaded media with any third parties.
- Right to Deletion: Because no personal data or media is ever saved or stored on our systems, there is no retained data to delete.
- Non-Discrimination: All users receive complete access to full-resolution, unlimited client-side processing regardless of privacy preferences.
05. Contact & Governance
For architectural reviews, security inquiries, or data protection questions, please consult our technical whitepaper on the Technical Architecture page or review our source specifications.