Privacy Policy

1. Data Collected

Automatically collected data

• Anonymous token — A unique identifier randomly generated upon the first installation of the Extension. This token does not contain any personally identifiable information and cannot be used to identify you as an individual. It is stored in chrome.storage.sync and syncs across your Chrome instances via your Google account.
• Visual samples — When you initiate an analysis, the Extension captures visual samples from the video currently playing. This data is sent to our server for analysis and is not retained after processing.
• Image data — For image analysis on any website, the image is sent to our server in the same manner. It is not retained after analysis.
• Video or image URL — A SHA-256 hash of the URL is used as a cache key to avoid redundant analyses. The full URL is stored only in the history of Pro users.
• Analysis results — The AI detection score, the verdict (authentic, suspect, AI-generated), and associated metadata (scan depth, date).

Voluntarily provided data

• Email address — Collected only during a purchase via Stripe Checkout (Starter or Pro subscription). The email is used exclusively for account recovery and billing. No newsletters, no marketing emails.

2. Purpose of Processing

Your data is processed solely for the following purposes:

3. Legal Basis

Data processing is based on the following legal grounds under the GDPR:

• Performance of a contract (Article 6.1.b) — Processing of the token, visual samples, and results is necessary to provide the detection service you requested.
• Performance of a contract (Article 6.1.b) — Processing of the email address and payment data is necessary to manage your subscription.
• Legitimate interest (Article 6.1.f) — Caching results (via the SHA-256 hash) aims to improve service performance and reduce costs.

4. Storage and Security

Infrastructure

Data is processed and stored on Cloudflare infrastructure, a global network of edge servers. The components used are:

• Cloudflare Workers — Application server (code executed closest to the user)
• Cloudflare KV — Distributed key-value cache for analysis results
• Cloudflare D1 — SQLite database for user accounts, quotas, and history

Security measures

• All communications between the Extension, the server, and third-party APIs use the HTTPS/TLS protocol
• API keys are stored as encrypted secrets in the Cloudflare Workers environment and are never exposed on the client side
• Visual samples are processed in memory and are never written to disk or retained after analysis
• The user token is generated in a cryptographically random manner
• No password is collected or stored

5. Third-Party Sharing

FAKE AI OR REAL never sells, rents, or shares your personal data for advertising or marketing purposes. Data is shared only with the following technical service providers, strictly necessary for the operation of the service:

Each provider has its own privacy policy:

• Stripe Privacy Policy
• Cloudflare Privacy Policy

6. Data Retention

Upon expiration of these periods, data is automatically deleted. A notice email is sent to you 30 days before the permanent deletion of your account. If you use the service again within this period, the deletion is cancelled. You can also request the immediate deletion of your data at any time from the extension (Settings > My Account > Delete My Account).

7. User Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — Obtain confirmation that data concerning you is being processed and receive a copy
• Right to rectification — Have inaccurate or incomplete data corrected
• Right to erasure — Request the deletion of your personal data
• Right to restriction — Request restriction of the processing of your data
• Right to data portability — Receive your data in a structured, machine-readable format
• Right to object — Object to the processing of your data based on legitimate interest

To exercise your rights, contact us at the address provided in the Contact section. We commit to responding within 30 days.

If you believe that the processing of your data does not comply with regulations, you have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés — the French data protection authority): www.cnil.fr

8. Cookies

Chrome Extension

The Extension does not use any cookies. Identification is done solely via the anonymous token stored in chrome.storage.sync, a storage space specific to the extension and isolated from the browser.

Website (fakeaiorreal.gekkode.com)

The landing page does not use any tracking, analytics, or advertising cookies. No third-party analytics tools (Google Analytics, Meta Pixel, etc.) are integrated.

9. Contact

For any questions regarding the protection of your personal data or to exercise your rights, you can contact us:

• Publisher: GEKKODE
• Website: fakeaiorreal.gekkode.com
• Email: privacy@gekkode.com

10. Changes

We reserve the right to modify this privacy policy at any time. In the event of a substantial change, we will notify you via:

• A notification in the Extension
• An update to the “Last updated” date at the top of this page

We encourage you to review this page regularly to stay informed of any changes.