Privacy Policy - Free Background Remover

This Privacy Policy explains how Code Master BV (“we”, “us”, “our”) collects, uses, and shares information when you use free-background-remover.com (the “Service”).

Quick summary (plain English)

We process images you upload to remove backgrounds and generate downloadable results.

We store both the original upload and the processed output (and a preview version) to improve the user experience (downloads, history, and re-access).

If you create an account, we store your login information (via Supabase) and your processing job history.

Payments are handled by Stripe; we don’t store your full card number.

We use cookies/local storage for sessions, security, analytics (GA4), and (if approved) ads (AdSense).

Guests’ images are deleted after 360 days. Logged-in and paid users’ images remain until you delete them.

1) Who we are (Controller)

Controller: Code Master BV
Location: Antwerp, Belgium
Contact (privacy & legal requests): hi@free-background-remover.com

If you have questions or requests about this policy or your data, email us at the address above.

2) What information we collect

A) Account information (if you sign up)

If you create an account, we collect and store:

• • Email address and authentication/session data required to log in (handled through Supabase Auth)
• • Your internal user ID
• • Subscription status and plan identifiers (not your full payment card details)

B) Image content and processing data

When you upload an image, we create a processing job to generate the result. We store:

• • Your original uploaded image
• • The processed output image (background removed)
• • A preview version (for faster browsing and display)
• • A job record (UUID), timestamps, status, and storage references required to provide downloads and history
• • If logged in, a link between your jobs and your user ID (so your history appears in your account)

Ownership: You keep ownership of your images. We use them only to provide and improve the Service as described here.

C) Usage data and technical data

We may collect technical and usage information such as:

• • IP address, device/browser type, and approximate location (derived from IP)
• • Pages viewed, feature usage, and performance diagnostics
• • Security-related signals (rate limiting, abuse detection)

D) Cookies and local storage

We use cookies and local storage to:

• • Keep you signed in (Supabase session/auth)
• • Maintain a session identifier for guest users so the upload flow works smoothly and monthly free limits can be applied
• • Enable Google Analytics 4 (GA4), when permitted
• • Enable Google AdSense advertising, if/when enabled and permitted
• • Enable Stripe checkout and subscription management

For details, see our Cookie Policy.

3) How we use your information

We use information to:

• • Provide the Service (uploading, processing, generating results, enabling downloads)
• • Maintain your job history and let you re-download results (especially for logged-in users)
• • Apply free usage limits (e.g., 3 images/month for guests; 20 images/month for signed-up users)
• • Operate accounts and authentication
• • Process subscriptions and manage billing status
• • Provide customer support and respond to requests
• • Prevent abuse, fraud, and security incidents
• • Analyze usage and improve the Service (GA4, if enabled with consent where required)
• • Display ads (AdSense, only if/when enabled and permitted)

4) Legal bases (EEA/UK users)

If you are in the EEA/UK, we process personal data under these legal bases:

• • Contract: to provide the Service you request (image processing, account features)
• • Legitimate interests: to secure, maintain, and improve the Service (abuse prevention, reliability)
• • Consent: for analytics and advertising cookies where required
• • Legal obligation: where we must keep certain records (e.g., accounting/tax compliance)

5) Where data is processed and stored

The Service is hosted on Amazon Web Services (AWS). Authentication and certain account data are handled via Supabase (US region). Payments are processed by Stripe.

Because we use global service providers, your data may be processed in countries other than your own (including the United States). Where required, we rely on appropriate safeguards for international transfers.

6) Downloads, access, and security (high level)

We take steps to prevent other users from downloading your images:

• • For logged-in users, downloads are restricted to the authenticated user and protected access methods are used.
• • For guests and certain download flows, we use time-limited download links (presigned URLs) so you can download results without needing an account.

No system is perfect, but we use reasonable measures to protect your content and account access.

7) Retention (how long we keep data)

Images and results

• • Guests (not logged in): images (uploads, outputs, previews) are retained for up to 360 days and then deleted automatically, unless deleted sooner by the user.
• • Logged-in users (free or paid): images (uploads, outputs, previews) are retained until you delete them from the Service.

We may also delete content if required to comply with law, enforce our policies, or protect the Service.

Account and billing data

We keep account data as long as your account is active and as needed to provide the Service. If you request deletion, we will delete or anonymize data where feasible, except where we must retain certain records to comply with legal obligations (for example, accounting/tax records related to paid subscriptions).

8) Sharing and third parties

We share data only as needed to run the Service:

• • AWS (hosting/storage/CDN): hosting, storage, content delivery, and related infrastructure
• • Supabase (auth and user management): login/authentication and user account functionality
• • Stripe (payments): subscription payments and billing management
• • Google Analytics (GA4): website analytics (only when enabled and permitted)
• • Google AdSense: advertising (only if/when enabled and permitted)

These providers may process data as service providers (processors) or, in some cases (e.g., Google/Stripe), as independent controllers for certain processing.

9) Logs and diagnostics

Like most online services, our infrastructure may generate standard server and access logs (for example: IP address, request metadata, timestamps, and object identifiers). We do not intentionally store your image content inside logs.

10) Your rights and choices

Depending on your location, you may have rights to:

• • Access, correct, or delete your personal data
• • Object to or restrict certain processing
• • Export data (where applicable)
• • Withdraw consent (for analytics/ads cookies) at any time

To make a request, email hi@free-background-remover.com.

If you are in the EEA/UK, you also have the right to lodge a complaint with a supervisory authority. In Belgium, this is the Belgian Data Protection Authority.

11) Children

The Service is not specifically directed to children. Under Belgian law, children under 13 generally require parental consent for consent-based processing in relation to information society services. If you believe a child has provided personal data without appropriate consent, contact us at hi@free-background-remover.com.

12) Changes to this policy

We may update this Privacy Policy from time to time. We will update the effective date above when changes are made.