Privacy Policy

Geradoor is operated by Matheus Cardoso, an individual. For anything about privacy — requesting information, correction or deletion of data — write to mathuscardoso@gmail.com.

Most tools send nothing anywhere. The SSN, EIN, test card, phone number and image vectorizing are computed inside your browser. Close the tab and it is gone: none of it passed through a server.

The WhatsApp link and the Instagram profile address are also assembled here, in your browser. But the QR Code on those two pages, like the QR Code generator, creates a short link — and a short link requires storing the destination. Copying the link without generating the QR Code sends nothing.

To cut out a photo, your browser sends a downscaled copy of it — at most 2048 pixels on the long side — to a service of ours hosted on Cloudflare, which returns the outline of what is in the foreground. Your full-resolution photo never leaves your device: the final cutout is assembled here, from the response that came back.

• The copy sent is not stored. It is processed and discarded when the request ends, and the response carries no cache.
• The request goes without cookies and without a referer: the service does not know what page you came from or who you are.
• There is a daily cap per person, to keep costs from running away. To count it, we store a code derived from your IP address — a hash of the address with the day's date — never the address itself. Since the date is part of the hash, the code changes every day and the previous day's codes are deleted.
• When that service is unavailable or the cap is reached, the cutout is computed on your own device with smaller models. The page says so when that happens.

The QR Code generator creates a short link, and that requires storing something. Our database holds: the destination address you entered, the corresponding short code, the creation date and a count of how many times the QR Code was scanned.

• Each scan records only the date and time. We do not store IP address, location, device or anything else about whoever scanned.
• These records are kept indefinitely, because the link has to keep working. If you want a QR Code deactivated and deleted, ask by email.
• Do not put sensitive information in a shortened URL: anyone with the short code reaches the destination, and the address is stored with us.

We use Vercel Web Analytics and Speed Insights to know which pages are visited and whether they load quickly. This measurement uses no cookies and creates no identifier that follows you across days or sites: each visit is reduced to a technical code derived from the request, rotated every 24 hours. What remains are aggregate numbers — how many visits, from which country, on which page — with no link to a person.

Like any site, our hosting provider (Vercel) and the service that computes the cutout (Cloudflare) keep technical access logs — IP address, date, resource requested — used to operate the service, protect against abuse and investigate incidents. We do not use these logs to profile anyone.

Preferences live in your browser's local storage and never reach us: the light or dark theme, the sidebar open or collapsed, the brush size in the background remover, the label layout, the chosen language, and the list of recent results shown in the menu. Clearing site data in your browser clears all of it. The detail is in the Cookie Policy.

We do not sell or hand data to anyone. The only third parties involved are the ones that run the site:

• Vercel — hosting, the QR Code database and usage measurement.
• Cloudflare — the Background Remover cutout.

Both operate servers outside Brazil, so there is an international transfer. We may also disclose information when the law or a court order requires it.

Under Brazil's LGPD: to perform what you asked for — cut out the image, create the short link — and by legitimate interest in keeping the service running, protected against abuse, and improvable. We do not use your data for advertising.

You may request confirmation that we process any data of yours, access to it, correction, anonymization, blocking or deletion, and you may object to a processing. Write to mathuscardoso@gmail.com. One honest caveat: since we ask for no sign-up and the usage measurement is anonymous, we almost never have a way to link a piece of data to you. The case where we can act is the QR Code, if you tell us the short link.

All traffic is encrypted over HTTPS. The internal area of the site is protected by a password and a signed cookie. Even so, no service is immune to failure: do not send documents, health data, passwords or anything you cannot afford to lose through this site.

Geradoor is a work tool and is not directed at children under 13. We do not knowingly collect data from children.

When this policy changes, the date at the top changes with it. Material changes take effect on publication; continuing to use the site afterwards means you are aware of them.