Last updated: 6 September 2026
The short version. The instant roast runs entirely in your browser and your photos never leave the device. The AI roast button is different: pressing it uploads the photos so a language model can look at them. Nothing else about you is collected, there are no cookies, and there is no analytics.
There are two ways to have photos judged, and they behave differently. This is the part worth reading.
| What you press | Where the photos go |
|---|---|
| The instant roast — the score you get automatically when you drop photos in | Nowhere. The scoring, the auto-fix and the before/after preview all run in your browser, on your machine. No photo is sent to us or to anyone else. |
| Photographer's roast (AI) — the separate button you have to press | The photos are sent, over HTTPS, to our server and on to Anthropic, whose model writes the critique. We do not store them; Anthropic's handling is governed by their commercial terms, under which API inputs are not used to train their models. If you would rather no photo left your device, do not press this button. |
Either way, please do not upload photos of people, documents, number plates or anything else you would not want a stranger to see. The tool is for rooms and objects.
If you press "was this fair?" or correct the category, the page sends: the language, the category, the set score, each photo's score and issue keys, the measurements the engine took (brightness, contrast, colour cast, sharpness, tilt, edge density, pixel dimensions), and — only when you correct a category — the numeric scene fingerprint the model produced on your device. No image is ever sent with feedback. It is used to calibrate the scoring. It carries no name, no email and no account, because there is no account.
What the site does keep on your own device is set out on the cookies and storage page.
PRO and the set pass are handled by PayPal. Your card details go to PayPal and never reach us — we receive only the subscription or order identifier, which is what your key is built from. PayPal processes that payment under its own privacy policy.
Fonts are served from this site, not from Google.
The site runs on Cloudflare Pages. Cloudflare keeps standard request logs, including IP addresses, to serve the site and stop abuse. The rate limiter on the AI roast counts requests per visitor per day; without a salt configured that counter is keyed to a value that changes daily and cannot be traced back to a visitor.
Because there is no account and no profile, in almost every case we hold nothing about you at all. If you have sent feedback and want it removed, email enoshprojact@gmail.com with roughly when you sent it and we will delete the matching records. Under the Israeli Privacy Protection Law and, if you are in the EU or UK, the GDPR, you may ask what we hold, ask for it to be corrected or deleted, and complain to your supervisory authority. We answer within 30 days.
The tool is for people selling or letting property and goods. It is not directed at children and we do not knowingly collect anything from them.
If this changes, the new version appears here with a new date.