Privacy Policy

Last updated: March 1, 2026

1. Overview

Cirus ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information when you use the Service at cirus.onl.

2. Information We Collect

Cirus is designed to be privacy-first. We do not require accounts or collect personal information like names, email addresses, or phone numbers. The information we do collect is limited to:

• Uploaded Images: The image files you upload to the Service, along with metadata such as file name, file type, file size, and upload timestamp
• Content Hashes: Cryptographic hashes (SHA-256) of uploaded images, used for content moderation and deduplication
• AI Scan Results: Classification scores from our automated content moderation system (processed client-side; scores are not stored on our servers for non-flagged content)
• Server Logs: Standard web server logs including IP addresses, browser user agents, request timestamps, and referring URLs. These logs are retained for a maximum of 30 days
• Cookies: We use only essential, functional cookies. We do not use tracking cookies, advertising cookies, or third-party analytics cookies

3. How We Use Your Information

We use the collected information solely for:

• Hosting and serving your uploaded images
• Automated content moderation to detect and prevent prohibited material (CSAM, explicit content, etc.)
• Maintaining platform security, preventing abuse, and complying with legal obligations
• Generating anonymous, aggregated usage statistics

4. AI Content Scanning

Our content moderation system uses machine learning models that run primarily on the client side (in your browser). This means your images are analyzed locally before being uploaded. For images that pass the initial client-side scan, additional server-side checks may be performed including hash matching against known databases of prohibited content. We do not store AI scan results for images that pass moderation checks.

5. Data Storage

Uploaded images are stored on Vercel Blob Storage, a cloud storage service with data centers worldwide. Images are served through a global content delivery network (CDN) for optimal performance. Data may be stored and processed in multiple countries.

6. Data Retention

Images uploaded without an expiration period may be retained indefinitely. Images with a specified expiration will be automatically deleted after the designated period. Server logs are retained for a maximum of 30 days. Content hashes may be retained indefinitely for moderation purposes.

7. Data Sharing

We do not sell, trade, or rent your information. We may share data in the following limited circumstances:

• Law Enforcement: When required by law, or in response to valid legal process such as subpoenas, court orders, or warrants
• CSAM Reporting: Content identified as CSAM will be reported to the National Center for Missing & Exploited Children (NCMEC) and relevant law enforcement agencies, along with any available information about the upload
• Service Providers: With trusted third-party service providers who help us operate the Service (such as cloud hosting providers), under strict confidentiality agreements

8. Your Rights

You have the right to:

• Request deletion of your uploaded images (contact us with the image URL)
• Request information about what data we hold related to your uploads
• Opt out of non-essential data collection (though our collection is already minimal by design)

9. Children's Privacy

The Service is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children. Our AI moderation systems actively detect and block content that exploits or endangers minors.

10. Security

We implement reasonable technical and organizational measures to protect uploaded content and associated data. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

11. International Users

The Service is operated globally. By using the Service, you consent to the transfer and processing of your data in countries outside your country of residence, which may have different data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the Service after changes are posted constitutes acceptance of the revised policy.

13. Contact

For privacy-related inquiries, data deletion requests, or questions about this policy, please contact us through the information provided on the platform.