Privacy policy.
Pictures are checked on your phone and never leave it. Here is everything else, plainly.
Effective October 7, 2026. This policy covers the filttr service (filttr.org, your filttr portal and filttr-managed devices) and the filttr Image Guard app and Safari extension.
filttr Image Guard
Pictures stay on your phone
Image Guard checks pictures in Safari using Apple’s on-device detectors and a model that runs on the phone. Pictures, and anything about what’s in them, are never sent to filttr or anyone else.
What the extension stores on the phone
- Your filttr User ID, if you link the extension to a filttr account.
- The settings your filttr administrator chose, and the list of allowed and blocked websites for your account.
- The address of the page being opened, for two minutes, so a block page can show which site was blocked.
- Its decisions about pictures it has already checked (the picture’s address and whether it was shown), so they load instantly next time. They’re kept for up to two weeks and can be cleared from the extension’s panel.
This stays in Safari’s storage on the phone.
What it sends to filttr
- Settings checks: when linked, the extension sends your User ID to filttr.org to download your current settings and website lists.
- Site requests: only when you tap “Request this site” on a block page, it sends that site’s address and the reason you typed, so your administrator can review it.
The extension needs access to all websites so it can check pictures on any page. It does not record or send your browsing history.
The filttr service
To run your filter, filttr keeps the information needed to manage it:
- Account details you or your administrator give us, such as name and email.
- Your filter settings: the profile, allowed and blocked sites, and allowed apps.
- Requests you send for websites or apps, and the administrator’s answer.
- Managed devices: if your phone is managed by filttr, details the phone reports to its administrator, such as model, iOS version, storage, battery and installed apps.
- Payments: if you pay monthly, Stripe processes the card. filttr never sees or stores card numbers.
If your administrator turns on browsing records, the portal tells you so.
What we don’t do
- No ads, and no tracking across other companies’ apps or websites.
- We don’t sell or rent your information.
- No analytics or advertising SDKs in the Image Guard app.
Who processes data for us
filttr runs on Google Firebase (data storage) and Vercel (hosting). Email is sent through Resend, and payments go through Stripe. They handle data only to provide these services to filttr.
Keeping and deleting it
We keep account information while the account is active. To have your information deleted, or to ask what we hold, contact us through the contact page. Uninstalling Image Guard removes everything the extension stored on the phone.
Children
filttr is set up by parents, schools and other administrators to protect the people using their devices. We collect only what’s needed to run the filter.
Changes
If this policy changes, we’ll update this page and its date.
Contact
Questions? Reach us on the contact page.