Skip to content
MoaMoa home

Privacy

Last updated: October 16, 2026

This policy explains what happens to your files and to information about your visit when you use MoaMoa (moamoa.io). The short version: your files stay on your device and are never sent to us or to anyone else. Like most free websites, MoaMoa is funded by ads from Google and may use Google Analytics to understand how the site is used. Both use cookies, as described below.

Who is responsible

MoaMoa is run by MoaMoa ("we", "us"), who is responsible for this website and this policy. For any privacy question or request, email support@moamoa.io.

Your files stay on your device

Your files are processed on your device and are not uploaded. Photos, screenshots, captions, watermark text, annotations and name lists are handled by code running inside your browser. This includes the background remover: its AI model is downloaded to your browser and runs there.

  • The site's code has no upload path. We never receive, see or store your files or results.
  • Your files, file names, photo details and anything you type into a tool are never passed to Google's ad or analytics code, or to anyone else.
  • Results are kept only in the page's memory and are cleared when you reload or close it.
  • Saved photos are written without EXIF metadata such as location, camera details and capture time.
  • Your files are never used to train AI models, by us or anyone else, because they never leave your device.

What we receive when you visit

Loading the site requests its pages, scripts, fonts and AI model files from our host, Cloudflare, like any website. To deliver the site and protect it from abuse, Cloudflare processes technical data such as your IP address, the requested page, the time, your browser and device type and the referring page. See Cloudflare's privacy policy.

We also use Cloudflare Web Analytics to count visits and see how fast pages load. A small script from Cloudflare reports the page address, the referring page, your browser type, your country and loading times. It sets no cookies, stores nothing on your device and doesn't follow you across other websites. Like the other analytics on this page, it never receives your files or anything you type into a tool.

If you email us, we receive your email address and whatever you write, and use them only to reply. We delete the conversation when it's no longer needed, unless the law requires us to keep it.

Advertising (Google AdSense)

Pages of the site show ads from Google AdSense. Currently they appear on tool pages: at the sides of the page on wide screens and below the tool on smaller ones. Ads are never placed inside a tool.

Google and its partners use cookies and similar technologies to show ads, to limit how often you see them, to measure them and to prevent fraud. They may base ads on your earlier visits to this and other websites, and they receive technical data such as your IP address and browser details. Google acts as an independent controller of this data.

Google's ad code runs in the same page as the tool, so the browser treats it like the site's own code. The tools work the same if you block ads.

Analytics (Google Analytics)

We may use Google Analytics to understand how the site is used: which pages and tools are opened, whether a task succeeded or failed, the rough number of files, the file format, and your approximate region, browser and device type. This helps us fix problems and decide what to build next.

  • Analytics never receives your files, file names, photo details, results or anything you type. Only a short, fixed list of events is sent, such as "tool opened" or "converted 2-5 files to JPEG".
  • We don't use session recording, and we don't use analytics data to identify you.
  • Google Analytics sets cookies (such as _ga) to tell visits apart. Learn how Google handles data, or install the Google Analytics opt-out add-on.

Your consent

Where the law requires it, for example in the European Economic Area, the United Kingdom and Switzerland, a consent message from Google's certified consent platform asks you before ad or analytics cookies are used for these purposes. You can change your choice at any time from the same message. Where the law gives you the right to opt out of the sale or sharing of personal data for advertising, such as in some US states, the message offers that too.

Cookies and storage on your device

  • Set by the site's own code: no cookies. Only your language choice (local storage) and a dismissed language suggestion (session storage, cleared when you close the tab).
  • Set by Google: advertising and analytics cookies, as described above, and your consent choice.
  • Set by Cloudflare: possibly a security cookie, if it needs to check for automated traffic.

You can delete or block cookies and site data in your browser settings. The tools keep working if you do.

Who receives data

We don't sell your personal data, and we never share your files because we never have them. Data about your visit reaches:

  • Cloudflare, which hosts and delivers the site and provides Web Analytics.
  • Google and its advertising partners, which serve and measure the ads.
  • Google, for analytics, once Google Analytics is in use.
  • Authorities, if the law requires us to disclose the little data we hold.

These providers operate worldwide, so data about your visit may be processed outside your country, including in the United States. They use their own safeguards for international transfers, such as the European Commission's standard contractual clauses and the EU-US Data Privacy Framework.

How long data is kept

  • Your files: not at all, because we never receive them.
  • Technical and Web Analytics data at Cloudflare: for the periods in its own policy.
  • Advertising data: for the periods in Google's policies. Ad cookies typically last up to 13 months.
  • Analytics data: up to 14 months, then deleted by Google Analytics.
  • Emails: only as long as needed to answer you.

Your rights

Depending on where you live (for example under the EU and UK GDPR, Korea's Personal Information Protection Act or California privacy law), you may have the right to access, correct or delete personal data about you, to object to or restrict its use, to data portability, to opt out of targeted advertising, and to withdraw consent. For data held by Google, the links above are the fastest route. For anything else, email support@moamoa.io and we'll answer within one month. You can also complain to your local data protection authority.

Children

The site is meant for a general audience and isn't directed at children under 13 (or the minimum age in your country). We don't knowingly collect personal data from children. If you think a child has sent us personal data, email us and we'll delete it.

Security

Processing files on your device is the main protection: there is nothing of yours on our side to leak. The site is served only over HTTPS. No system is perfectly secure, so keep your own copies of important files.

Changes to this policy

If we change how the site handles data, we'll update this page and the date at the top before the change takes effect.

Contact

MoaMoa, support@moamoa.io.