Privacy Policy

Website access and file inspection

Opening this website involves normal network requests to load it. File inspection is separate: when you choose or drop a local media file, C2PA Lab reads and parses it in your browser with JavaScript and WebAssembly. Your selected media and parsed C2PA data are not uploaded to C2PA Lab servers for inspection.

Media files stay on your device

C2PA Lab inspects files in your browser. When you select or drop a file, it is read by local JavaScript and WebAssembly rather than being uploaded for inspection.

What we do not collect

For the inspection workflow, none of your selected media, file hashes, manifest contents, or personal data embedded in media is uploaded to C2PA Lab. The site uses Google Tag Manager and Google Analytics 4 for aggregate usage measurement; inspection events are limited to non-sensitive metadata such as a controlled format ID, standardized result status, or standardized error category. If your browser supports it, recent inspections are stored locally in IndexedDB: a saved record includes the parsed C2PA report, a generated preview thumbnail, and file metadata. It remains in your browser until you remove it, and this local data is not transmitted by the inspection workflow.

Local resources

The application's fonts, styles, C2PA engine, and bundled examples are served from this website's own origin. As with normal website use, requests for these resources expose network information to the site's hosting provider.

Contact

Questions about privacy? Write to hello@c2palab.com.