Privacy
Privacy notice
This notice explains how the RedactNinja public website (redactninja.com) handles personal data, and how the RedactNinja workspaces handle the files you select.
Who is responsible
This website is run by Redact Ninja ("RedactNinja", "we", "us"). Redact Ninja is the controller responsible for personal data collected through this public website. For any privacy question or request, email privacy@redactninja.com.
Your documents stay on your device
The SAR workspace at app.redactninja.com and the PDF toolkit at pdf.redactninja.com process the documents you select inside your browser. Document contents are not uploaded to a RedactNinja server for processing, and we never receive them. Case files, redacted PDFs, audit files and disclosure packs are created as downloads on your device only when you choose an export action.
The image tools at image.redactninja.com work the same way. Pictures you select are read and changed inside your browser. The background removal and face finding models, the text recognition engine and the HEIC photo decoder are files on image.redactninja.com that your browser downloads and runs on your device, so your pictures are not sent anywhere. As with any web page, the server records the requests for those files, not the contents of your pictures.
The workspaces are separate: opening a link between them does not transfer a file or case. None of the workspaces includes this website's advertising or analytics code. You remain responsible for protecting your device, downloaded files and anything you share.
What this website collects
- Server logs. Our hosting provider records requests to the website, which can include IP address, requested page, browser type, time and error information. These logs are used to keep the site running and secure.
- Analytics, with your consent. Google Analytics measures page visits, traffic sources and clicks on links to the workspaces, Chrome extension, downloads and donation page. It is never used to collect document contents, file names, case references or redaction terms.
- Advertising. Google AdSense shows ads on public pages. With your consent, Google may use cookies to personalise ads and measure them. Without consent, Google may still show non-personalised or limited ads.
- Emails. If you contact us, we use your email address and message to deal with your enquiry.
Google's scripts load when a page opens, with storage set to denied until you make a choice. Denied storage does not mean no network requests reach Google. See the cookie notice for details.
Legal bases
- Analytics and advertising cookies: your consent, which you can withdraw at any time using "Cookie settings" in the page footer.
- Server logs: our legitimate interest in running a secure, working website.
- Emails: our legitimate interest in replying to people who contact us.
How long data is kept
- Detailed analytics data (user and event level) is kept for no more than 14 months, the longest retention period Google Analytics allows. Aggregated reports are kept by Google Analytics.
- Server logs are kept by the hosting provider in line with its own retention settings.
- Emails are kept for as long as needed to deal with the enquiry and any follow-up, then deleted.
Google and international transfers
Google acts as an independent controller for some advertising data. Google may process data outside the UK, including in the United States, and states that it relies on recognised safeguards for those transfers. See how Google uses information from sites that use its services.
Do not email sensitive documents
Do not send live SAR documents, special category data or passwords by ordinary email unless a secure support process has been agreed first. A fictional example is enough to describe most problems.
Your rights
You can ask for access to, correction or deletion of your personal data, or object to or restrict how it is used. Email privacy@redactninja.com. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Security
The security page explains local browser processing, encrypted case files and current limits.