Privacy Policy

This Privacy Policy explains how ORYGN LLC collects, uses, discloses, and protects information in connection with File X-Ray, including the website, browser application, and related pages (collectively, the "Service").

File X-Ray is designed to inspect metadata in files inside your browser. The Service does not require you to create an account to use the core scanning flow. Your file is never uploaded. Some data derived from it can still reach third-party service providers: an AI summary is sent only when you ask for one, and if a file carries GPS coordinates, the map and the reverse-geocode lookup send those coordinates only after you press the button in the Location card. Until you press it, the coordinates stay in your browser along with the file.

Depending on how you use the Service, we may collect or process the following categories of information:

Files and metadata processed locally. When you choose a file, the Service reads that file in your browser to detect and display metadata. Core parsing and core stripping functions are performed locally on your device.

Derived metadata and feature inputs. Limited data derived from your file may be sent to service providers. The metadata fields read from your file, excluding its cryptographic hashes, together with location context, are sent to an AI analysis provider only if you request an on-screen summary. Latitude and longitude values are sent to a mapping or geocoding provider in order to render a map and resolve an address, and, like the summary, only when you ask: a file that carries coordinates sends nothing until you press the button in the Location card.

Device, browser, and request data. Like most internet services, our infrastructure and security providers may automatically receive technical data when you visit the Service, such as IP address, browser type, device information, timestamps, approximate geolocation inferred from IP, and referring or exit URLs.

Usage analytics. We use Cloudflare Web Analytics to count page views and measure how quickly pages load. Each page load sends the address of the page you are on; the address you arrived from, including anything after the question mark in it, which for a search engine can be the words you searched for; performance measurements taken by your browser, including how much memory the page is using; and an identifier that is generated fresh for that page load and is not reused on the next one.

Preference data. The Service stores your theme preference in browser local storage so your interface can remain in light mode or dark mode across visits.

Communications. If you contact us directly, we may receive your name, email address, and the contents of your message.

We use information we collect or process to:

Provide, operate, secure, and maintain the Service.

Analyze files locally in the browser and present metadata results to you.

Generate AI-assisted summaries when you request them, and render a map and resolve an address when you ask for a scanned file's coordinates to be looked up.

Remember your interface preferences.

Monitor availability, diagnose technical issues, prevent abuse, and protect the Service.

Comply with legal obligations and enforce our rights.

If EEA, UK, or similar data protection laws apply, we generally process personal information on one or more of the following bases: to provide the Service you request, to comply with legal obligations, and for our legitimate interests in operating, securing, improving, and protecting the Service.

Where consent is required for a particular activity, we will rely on consent to the extent required by applicable law.

File X-Ray is built around browser-local processing. In normal operation, original files selected for analysis are parsed on your device rather than being uploaded to our application servers for core metadata inspection.

That said, browser-local processing is not the same as zero network activity. The Service may still make network requests in connection with optional features, page assets, security controls, and infrastructure required to deliver the website.

We may disclose information in the following circumstances:

Service providers. We may use third-party providers to host, secure, deliver, and support the Service, including providers that assist with AI analysis, mapping, geocoding, content delivery, analytics, and technical operations. Fonts are served from our own domain and are not a third-party request.

Legal compliance and protection. We may disclose information if we believe disclosure is reasonably necessary to comply with law, regulation, legal process, or governmental request, or to protect the rights, safety, security, and integrity of ORYGN LLC, the Service, our users, or others.

Business transactions. We may disclose information in connection with a merger, financing, acquisition, reorganization, sale of assets, or similar corporate event.

With your direction. We may disclose information when you ask us to do so or when the disclosure is inherent in a feature you choose to use.

The Service uses local storage to remember theme preferences. The Service may also rely on cookies, cache mechanisms, or similar technologies that are necessary for site delivery, security, and basic functionality.

Analytics. Cloudflare Web Analytics is the only third-party script that runs on this site. It sets no cookies and stores nothing in your browser. Cloudflare states that, for the purposes of displaying analytics, it does not use client-side state such as cookies or local storage, and does not track visitors over time by IP address, User Agent string, or other fixed attributes. That is Cloudflare’s description of its own product, not something we can verify from the outside.

Other things Cloudflare does. Cloudflare also provides the network that delivers this site, which means three things worth stating plainly. It processes the technical details of every request, including your IP address, whether or not analytics is enabled. It inserts its own bot-detection script into our pages, which our Content-Security-Policy blocks from running. And if you request an address that does not exist, Cloudflare may show its own verification page instead of ours.

Map tiles. Cloudflare is the only third-party script, but it is not the only third party your browser contacts. When you ask for the coordinates in a scanned file to be looked up, the map is drawn from tile images your browser requests directly from OpenStreetMap, which is described under Information We Collect above. If you do not ask, no tile is requested.

File X-Ray does not use the Service to sell personal information and does not use personal information for cross-context behavioral advertising.

Because there is no universally accepted standard for browser "Do Not Track" signals, the Service does not currently respond differently to such signals.

We do not intentionally permit third parties to track your activities across unrelated websites for advertising through the Service. However, when your browser requests third-party resources or you use optional third-party powered features, those providers may receive technical request information as part of delivering their services.

Original files you process for core scanning remain under your control on your device and are generally handled in browser memory during use of the Service.

Theme preference data stored in local storage remains on your device until you clear it or overwrite it.

Technical logs and operational records maintained by us or our providers may be retained for as long as reasonably necessary to operate, secure, troubleshoot, and protect the Service, to comply with law, and to resolve disputes.

Where information is processed by third-party providers because you used a particular feature, their retention practices may also apply, and we do not control all independent retention periods once data is processed by those providers.

We use commercially reasonable measures designed to protect information under our control. However, no security measure is perfect, and we cannot guarantee absolute security.

You are responsible for deciding whether any file is appropriate to analyze using the Service and for reviewing outputs before relying on them or sharing resulting files.

Depending on where you live, you may have rights to request access to, correction of, deletion of, or additional information about personal information we maintain about you.

Because File X-Ray does not require user accounts for core use and performs core file parsing locally in your browser, our ability to identify, retrieve, correct, or delete information tied to a specific user may be limited in some cases.

California residents may have rights under California privacy law, including rights to know, delete, and correct certain personal information, and the right not to be discriminated against for exercising those rights. We do not sell personal information and do not share personal information for cross-context behavioral advertising.

Residents of the EEA, UK, and similar jurisdictions may have rights under applicable data protection laws, including rights of access, rectification, erasure, restriction, objection, and portability, subject to legal limitations.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the Service. If you believe a child has provided personal information to us, please contact us and we will take appropriate steps.

ORYGN LLC is based in the United States. If you access the Service from outside the United States, your information may be processed in the United States or other jurisdictions where we or our service providers operate.

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date on this page and may provide additional notice where appropriate.

If you have questions about this Privacy Policy or our data practices, please contact:

ORYGN LLC

Email: security@orygn.tech