Legal

Privacy Policy

Last updated: May 3, 2026

Short version: Images analyzed by the SDK never leave the user's device. We collect only what's needed to operate your developer account and track quota usage.

1. Who We Are

xPunge is a software SDK for on-device NSFW and explicit content detection, operated by Mark Russo. Contact: xpunge@markatlarge.com

2. What Data We Collect

From developers (you):

Email address — used to create your account and send your API key
Payment information — processed by Stripe; we never see or store your card details
App name, bundle ID, and package name — used to tie your API key to your application

From end users of your app:

Nothing. xPunge runs entirely on-device. Images analyzed by the SDK are never transmitted to our servers.

Usage data:

A usage count (one integer) is reported to our servers at each app launch. This is the number of images processed in the previous session. No image data, no user identifiers, no device information is included.

3. How We Use Your Data

Email: to deliver your API key, send usage warnings, and notify you of billing events
Payment info: processed by Stripe to manage your subscription
Usage counts: to track your monthly quota and enforce plan limits

We do not sell, rent, or share your data with third parties except as required to operate the service (Stripe for payments, Supabase for database hosting, Resend for email delivery).

4. Data Retention

Account data is retained for the life of your account plus 90 days after deletion
Usage counts are retained for 12 months for billing dispute resolution
Payment records are retained as required by law

5. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by emailing xpunge@markatlarge.com. We will respond within 30 days.

6. Security

API keys are signed with HMAC-SHA256 and tied to your app's bundle ID. Usage data is transmitted over HTTPS. We use Supabase with row-level security for data isolation.

7. Cookies

The developer dashboard uses a session cookie for authentication. No tracking or analytics cookies are used.

8. Changes

We will notify you by email if we make material changes to this policy.

9. Contact

xpunge@markatlarge.com