Privacy Policy
Last updated: 27 October 2026
Short version: your photos never leave your device. This free site shows ads from Google, which may use cookies, and you can choose whether those ads are personalised.
1. Who we are
Will It Flag? (willitflag.com) is an independent web tool that estimates whether a photo might be labeled as sensitive media on X (Twitter). Contact: contact@willitflag.com.
2. Your photos
Photos you choose are decoded and analysed entirely inside your browser on your device. They are never uploaded to us or anyone else, never stored, and never logged. The analysis result exists only in your open tab and is gone when you close it. The optional caption you type is used only to draw the post preview, and it is never sent anywhere.
How we keep photos away from other code on the page. The site loads advertising scripts, which run on the same page. To prevent them from seeing your photo:
- your photo is displayed only inside sandboxed preview frames with an isolated origin, which other page scripts can't read;
- file selections, drag-and-drop and paste are handled by our code first, and are not passed on to other scripts;
- no web address or global variable pointing at your photo is ever exposed on the page;
- ad units are never displayed next to a photo that may be sensitive.
Remaining risk, stated plainly: these protections stop ordinary ad code from seeing your photo, but no website can technically guarantee that a script running on the same page could never interfere (for example, a compromised ad script that changes the page). Browser extensions you install can see everything on every page, including this one. The caption box is ordinary page text. Nothing about your photo is ever sent anywhere by our code.
3. What is stored on your device
| Item | Purpose | Where |
|---|---|---|
| Site and model files | Faster repeat visits | Standard browser cache |
wif-mode-choice | Remembers Quick or Accurate, if you pick one | localStorage |
wif-consent | Remembers your ad-cookie choice | localStorage |
Advertising cookies (e.g. __gads, __gpi, IDE) | Serving, limiting and measuring ads; personalisation only if you allow it | Set by Google |
| Consent record (EEA/UK/Switzerland) | Stores your choices made in the consent message | Set by our consent management platform |
You can clear all of it at any time in your browser's site settings.
4. Advertising (Google AdSense)
We use Google AdSense to show ads. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.
You can opt out of personalised advertising by visiting Google Ads Settings, or opt out of some third-party vendors' use of cookies for personalised advertising at www.aboutads.info. Learn how Google uses information from sites that use its services.
When ads load, your browser connects to Google's servers, which receive standard request data such as your IP address, browser type, the page address and cookies. They do not receive your photo, your result or your caption.
Your choices.
- EEA, UK and Switzerland: a Google-certified consent management platform (IAB TCF) asks for your consent before personalised ads or advertising cookies are used. Until you choose, we signal Google Consent Mode "denied".
- Elsewhere, including Canada and the US: personalised ads are off until you allow them in our cookie message. Google may still use cookies for non-personalised ads (for example frequency capping, fraud prevention and measurement).
- You can change your choice at any time using Privacy choices in the footer.
- US state privacy laws: we do not sell personal information for money. Where ad personalisation counts as "sharing" or "targeted advertising", you can opt out with Privacy choices, and if your browser sends a Global Privacy Control signal we treat it as an opt-out and keep ads non-personalised.
5. Hosting and model files
Our hosting provider (and, if configured, the Hugging Face model CDN) receives standard web request data, like your IP address and browser type, to deliver the site and model files, and may keep short-term logs for security. These requests contain only file names, never your photo.
6. Children
The site is not directed at children under 13 (under 16 in the EEA/UK), and we don't knowingly collect their personal information.
7. Legal bases and your rights
For visitors in the EEA/UK we rely on consent for advertising cookies and personalised ads, and on legitimate interests for basic site delivery and security. We hold no account or photo data about you. For information held by Google, use Google's tools linked above. For anything else, including access, deletion or objection requests under GDPR, UK GDPR, PIPEDA or US state laws, contact contact@willitflag.com. You may also complain to your local data protection authority.
8. Changes
We'll update this page if anything changes and revise the date above.