Legal
Privacy Policy
Last updated: September 4, 2026
1. About Us
Maat Scan is operated by Hoot Hall LLC.
Contact: support@hoothall.com
2. Information We Collect
Uploaded Images
Images uploaded for analysis are processed in server memory only and discarded immediately after analysis is complete. They are not written to disk or stored in any database.
* For Standard and Pro subscribers, a small thumbnail image is saved in Firebase Storage to enable scan history. See Section 5 for details.
File Metadata
When you upload an image, we analyze the file's embedded metadata (such as EXIF camera data, XMP properties, C2PA content credentials, and image file headers) to detect markers of AI generation or editing. If such markers are found, the name of the detected tool (e.g., "Stable Diffusion") is included in your analysis result. This metadata is processed in server memory only and is not stored separately.
Account Information
When you sign in with Google or Apple, we receive your email address and the user ID provided by the authentication provider. We do not store your password.
Usage Data
We record scan counts, plan information, and other data necessary to provide the service. Image content is not included. For users who watch ads to earn bonus scans, we also record the number of bonus scans available and the number of ads watched today (reset daily at UTC midnight).
Anonymous Session Data
If you use the Service without signing in, we assign a Firebase anonymous user ID and store a scan counter (number of trial scans used, session creation date, and a 30-day expiration date) in Firestore. This data is automatically deleted after 30 days. We also set a first-party cookie (maat_trial, 180 days) containing a random identifier used solely to count trial scans in this browser.
Rate Limiting
To prevent abuse, we use Upstash, Inc. to enforce per-IP request limits. Your IP address is sent to Upstash as a rate-limit key and is retained by Upstash only for the duration of the rate-limit window (up to 24 hours). Maat Scan does not log your IP address separately from standard server access logs described above.
Access Logs
Standard server logs including IP address, browser information, and access timestamps are collected for security and troubleshooting purposes.
3. How We Use Your Information
- Computing and displaying naturalness scores
- Storing scan history (Standard and Pro subscribers only)
- Operating, improving, and troubleshooting the service
- Managing scan quotas and processing payments
- Preventing fraud and unauthorized use
- Complying with applicable laws
- Featuring user-consented scorecard images on social media and the Maat Scan website (only where explicit consent has been provided via the scorecard download modal)
- Managing anonymous trial scan quotas and enforcing rate limits to prevent abuse
4. Third-Party Services
We do not sell your personal information. We share data only with the following services necessary to operate Maat Scan:
Google Gemini API (Important)
We use Google LLC's Gemini API for AI image analysis. Uploaded images are sent to Google's servers for processing. Depending on the initial analysis, your image may be processed by more than one Google Gemini model within the same API account to improve accuracy. Please review Google's Privacy Policy for details on how Google handles this data.
Firebase (Google LLC)
Authentication data and scan history (including thumbnails for Standard/Pro subscribers) are stored on Firebase, a Google LLC service.
Stripe, Inc.
Payment information is processed by Stripe. We do not store your card number.
Google AdSense
We use Google AdSense to display advertisements on the Service. Google AdSense may use cookies and similar technologies to serve ads based on your prior visits to this or other websites. You can opt out of personalized advertising by visiting Google Ads Settings. For users in the EEA, UK, and Switzerland, a consent banner will be shown before ads are displayed.
Upstash, Inc.
IP-based rate limiting to prevent abuse. Your IP address is sent to Upstash servers. See Upstash's Privacy Policy.
5. Image Data Handling
Free Plan
- Uploaded images exist only in memory during processing
- Images are deleted from memory after analysis (typically within seconds)
- No image files are written to storage or databases
- Our staff cannot view your images
Standard and Pro Plans
- A reduced-size thumbnail is saved in Firebase Storage to enable the scan history feature
- Thumbnails are accessible only to you via your account
- Original full-size images are not stored — only the thumbnail
- Thumbnails are deleted when you delete your account or upon request
For images processed via Google Gemini API, please refer to Section 4 above.
6. Cookies
We use cookies issued by Firebase to maintain your authentication session. We also set a first-party cookie (maat_trial, 180 days) to count anonymous trial scans per browser; this cookie contains only a random identifier and is strictly necessary to enforce the free-tier scan limit. We also use Google AdSense, which may set cookies to serve relevant advertisements. AdSense cookies are subject to Google's Privacy Policy. Users in the EEA, UK, and Switzerland will be asked for consent before any ad-related cookies are set.
7. Your Rights
You may request access to, correction of, or deletion of your personal data (including account information, scan history, and thumbnail images) at any time. Contact us at support@hoothall.com and we will respond within a reasonable timeframe after verifying your identity.
8. Security
We protect your information through HTTPS/TLS encryption, Firebase security rules, and access controls. We conduct periodic security reviews to prevent unauthorized access, leaks, or data loss.
9. Children
Maat Scan is not intended for users under 13. Users between 13 and 18 should use the service with parental consent.
10. Changes to This Policy
We may update this policy in response to legal changes or service updates. For material changes, we will notify you through the service. Continued use after changes constitutes acceptance of the updated policy.
11. Analytics (Google Analytics 4)
We use Google Analytics 4 (GA4), a web analytics service provided by Google LLC, to understand how visitors use Maat Scan. GA4 collects the following data and transmits it to Google's servers:
- Cookie identifiers (anonymous client ID)
- Pages viewed and features used
- Device type, operating system, and browser
- Approximate geographic location (country / region level, derived from IP address)
IP addresses are automatically anonymized by GA4 before storage. No names, email addresses, or uploaded images are sent to Google Analytics. The purpose of collection is site usage analysis to improve the service.
Data recipient: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For users in the EEA, UK, and Switzerland, analytics storage defaults to denied in accordance with Consent Mode v2; no analytics data is collected until consent is granted.
For more information on how Google handles this data, see Google's partner sites policy.
12. Copyright / DMCA Takedown Notices
If you believe that content on Maat Scan infringes your copyright, please send a written notice to our designated DMCA agent:
Service Provider: Hoot Hall LLC (Maat Scan)
DMCA Registration: DMCA-1070963
Designated Agent Email: support@hoothall.com
Your notice must include: (1) identification of the copyrighted work; (2) identification of the infringing material and its location; (3) your contact information; (4) a good-faith belief statement; and (5) a statement of accuracy under penalty of perjury. We will respond expeditiously to valid notices.
13. Contact
For privacy-related inquiries, contact us at support@hoothall.com.