The tells registry, the proofreader, the word counter, the readability and vocabulary checks and the signed drafting record all run inside your browser and send nothing anywhere. Check, Humanize and the web search inside the originality tool do send text to a server. This page sets out what each one sends, what is stored, and for how long.
This policy explains what happens to the text you put into humanizeai.cc. The short version: most of the tools here run inside your browser and never send your text anywhere. Three do send it — Check, Humanize, and the web search inside the originality tool, which only runs when you press its own button.
These tools run as JavaScript inside your own browser. The text you type or paste stays on your device. It is not uploaded, not logged, and never reaches us or anyone else. You could disconnect from the internet after the page loads and they would still work.
The originality tool needs a specific note. Four of its five checks compare your document against itself to find repeated passages, unattributed quotations and figures with no source, and those send nothing anywhere. The fifth searches the live web for distinctive phrases from your draft. It is a separate button, it says so on the button, and it runs only when you press it.
The drafting record, which produces a signed proof that a human wrote the document, also runs locally. The signature uses ECDSA P-256 over SHA-256. The private key is generated in your browser and stays there.
When you press Check or Humanize, the text in the box is sent over the network. When you press the web check inside the originality tool, phrases from your document are sent too. Nothing else on the site does this.
The text goes to our own server function, hosted on Cloudflare. That function forwards it to Modal, a GPU compute provider, which runs the model and returns the result. The result comes back to your browser.
The web check is different: it sends nine-word phrases from your draft to a search provider (Serper or Copyscape) so they can be looked up against a web index. That is the only way to search the web, and it is why the check is behind its own button rather than running automatically.
The text is processed in memory to produce that result. We do not write it to any database. We do not use it to train anything.
Do not paste text into Check or Humanize that you are not willing to have processed on a server.
We want to be direct about this rather than bury it. The free tier gives you 10 credits per day, counted per IP address or network. To count them, we store a small number in Cloudflare KV under a key that contains your IP address. The key looks like cr:<your IP>:<24 hour bucket>.
That means your raw IP address is stored on the server for up to about 24 hours. We are not going to claim we do not store IPs, because we do. It expires automatically: the record has a time-to-live of 24 hours plus 60 seconds, after which it is gone.
The only thing stored against that IP is a credit count. Not your text, not your results, not a history of what you did.
Separately, your IP reaches Cloudflare whenever you load the site or make a request, because that is how HTTP works. Every website you visit sees this.
The complete list is short.
There are no accounts on this site, so most of the usual data simply does not exist.
The site uses your browser's localStorage to hold your drafts and your local drafting record on your own device. This is what lets you come back to a document.
It is best-effort. If your browser blocks storage, the site still works. You can clear it at any time through your browser settings, and doing so deletes those drafts and that record permanently. We cannot recover them, because we never had them.
Nothing here is long-lived.
Two companies are involved in normal use, and a third only if you press the web check.
The site is operated from outside the EU and the UK, and Cloudflare and Modal operate infrastructure internationally. If you are in the EU or the UK, your request, including the text you submit to Check or Humanize and the IP address attached to it, will be processed outside your country.
In practice this affects a request that lasts a few seconds and a credit count that expires within a day. It does not affect the browser-only tools at all, because that data never travels.
The site has EU and UK visitors, so the GDPR and UK GDPR apply. We rely on two legal bases.
Performance of a contract, Article 6(1)(b): when you press Check or Humanize, we process the text you submitted because processing it is the service you asked for. We cannot return a result without it.
Legitimate interests, Article 6(1)(f): we store your IP address for up to 24 hours to count the free daily allowance. Our interest is keeping a free service usable and preventing one visitor from consuming it entirely. The data is a single number, the retention is a day, and we cannot build a profile from it.
We do not ask for consent because we do not run analytics, advertising, or tracking that would require it, and we set no cookies of our own.
If you are in the EU or the UK you have the right to access your personal data, to have it corrected or erased, to restrict or object to processing, to data portability, and to complain to your national data protection authority. In the UK that is the Information Commissioner's Office.
Be aware of what those rights amount to here. We hold no account, no email address, and no history for you. The only personal data we hold is an IP address inside a credit counter that deletes itself within about 24 hours. There is nothing to export and, in almost every case, nothing left to erase by the time a request reaches us.
If you want us to delete that record sooner, contact us at the address in the last section of this page and tell us the IP address in question. We can only act on an IP you give us, because we have no other way to identify which record is yours.
Your drafts in localStorage are on your own machine. You can delete them yourself, immediately, by clearing site data in your browser.
This site is not directed at children. We do not knowingly collect personal data from children, and because there are no accounts, we collect no name, age, email address, or contact detail from anyone. If you believe a child's personal data has reached us, write to the address at the foot of this page and we will remove it.
The main security property of this site is how little there is to steal. There are no accounts, so there are no passwords to leak. There is no payment data. Your submitted text is not written to a database. The private key used to sign your drafting record is generated in your browser and never sent to us.
That said, no system is perfectly secure, and text you send to Check or Humanize does travel over the internet and is processed on third-party infrastructure. Treat those two tools accordingly.
These are product limits rather than privacy terms, but they explain why the IP counter exists.
There is no paid tier live today and we take no payment. That means there is nothing to cancel and no refunds to process.
If what we do with your data changes, we will change this page and update the date at the bottom. If a change materially affects what happens to your text or how long we keep your IP address, we will say so plainly on the page rather than quietly editing a line.
Write to the address below with any question about this policy, or any request about your data.
Contact: contact email to be confirmed
Operating entity: entity to be confirmed
Governing law: jurisdiction to be confirmed
Last updated: last updated to be confirmed