Privacy Policy
We don't like data. We help you destroy it.
Last updated: November 25, 2025
Our Mission
Astrava exists for one purpose: to help you protect your privacy. We provide tools that strip metadata, remove personal information, and help you take control of your digital footprint. We believe your data belongs to you—and sometimes, it's better off not existing at all.
Our Core Principles
We Don't Store Your Data
Every file you process stays in your browser. We never upload, store, or even see your files. When you strip metadata or convert a file, it happens entirely on your device.
We Don't Take Your Data
We have no interest in collecting your personal information beyond what's absolutely necessary. We don't want to know who you are. We just want to help you stay private.
We Help You Erase It
Our tools are designed to help you remove GPS coordinates, timestamps, device information, and other metadata that could identify you or reveal your location.
Client-Side Processing
All processing happens in your browser using JavaScript. Your files never leave your device. This is by design—we built it this way because we believe it's the right way.
About Advertising
Let's be honest: we don't like ads either. But we show them because they help us keep this service running and fund the development of new privacy tools.
We use Google AdSense to display advertisements. Google may use cookies and tracking technologies to serve ads based on your browsing history.
✓ You can always opt out of personalized ads through your browser settings or Google's ad preferences.
If you subscribe to our Pro tier, you get an ad-free experience. We'd rather you pay us directly than have advertisers pay for access to your attention.
Account Data
If you choose to create an account with us, here's exactly what happens:
- •Email & Password: Your account credentials are stored securely. Passwords are hashed using bcrypt—we cannot read them.
- •Database Hosting: Account data is hosted on Vercel using their PostgreSQL database service with Prisma. We don't run our own servers—we use trusted infrastructure providers.
- •OAuth (Google/GitHub): If you sign in with Google or GitHub, we only receive your email and profile name. We never receive your password from these providers.
Note: Creating an account is entirely optional. All our core tools work without any account.
Payment Processing
All payments are processed through Stripe, a leading payment processor.
What we DON'T see:
- • Your credit card number
- • Your billing address
- • Your bank account details
- • Any financial information
We only receive a confirmation that your payment was successful and a Stripe customer ID to manage your subscription. Stripe handles all the sensitive financial data—and quite honestly, we don't want to see it.
For Stripe's privacy practices, please review their Privacy Policy.
What We Actually Collect
Analytics (Optional)
We use Google Analytics to understand how people use our site—which pages are popular, how long people stay, etc. This helps us improve. You can block this with any ad blocker or privacy browser extension.
Local Storage
We store your preferences (like dark mode, processing presets) in your browser's local storage. This data never leaves your device.
Session Data
If you're logged in, we use a session token (JWT) to keep you authenticated. This is stored as a secure cookie in your browser.
Your Rights
You have the right to:
- ✓Use our tools without creating an account
- ✓Opt out of personalized advertising
- ✓Request deletion of your account and all associated data
- ✓Block analytics and tracking with browser extensions
- ✓Cancel your subscription at any time through Stripe's portal
Third-Party Services We Use
| Service | Purpose | Data Shared |
|---|---|---|
| Vercel | Website hosting & database | Account info (if registered) |
| Stripe | Payment processing | Payment details (not seen by us) |
| Google Analytics | Usage analytics | Anonymized usage data |
| Google AdSense | Advertising | Cookies for ad targeting |
| Google/GitHub OAuth | Authentication (optional) | Email & name only |
Questions or Concerns?
If you have any questions about this privacy policy or want to request data deletion, please reach out to us.
Contact UsThis privacy policy is effective as of November 25, 2025 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.