Last updated: May 5, 2026
Capcher ("we", "us", "our") operates the capcher.id website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
1. Data We Collect
Account Information (Optional)
If you choose to create an account, we collect your email address and display name via Google OAuth. Account creation is entirely optional.
Usage Data
We collect anonymous usage analytics including pages visited, features used, and general interaction patterns to improve our service.
Technical Data
IP addresses are temporarily collected for rate limiting and security purposes. This data is not linked to your identity.
2. How We Use Your Data
- Provide and maintain the Capcher service
- Improve user experience through analytics
- Enforce rate limits and prevent abuse
- Send service-related communications (only if you have an account)
- Comply with legal obligations
3. Data Retention
Server logs and IP addresses are retained for a maximum of 90 days. Account data is retained until you request deletion. Cached images are automatically purged based on usage patterns.
4. Third-Party Service Providers
We share data only with essential service providers required to operate Capcher:
- Supabase — Database and authentication services
- Vercel — Hosting and content delivery
- Upstash — Caching and rate limiting
These providers process data solely to deliver the service. We do not sell, rent, or share your personal data with advertisers or data brokers.
5. Your Rights (GDPR)
If you are located in the European Economic Area, you have the following rights:
- Access — Request a copy of your personal data
- Rectification — Request correction of inaccurate data
- Erasure — Request deletion of your personal data
- Portability — Request transfer of your data in a machine-readable format
- Objection — Object to processing of your personal data
6. Indonesian Data Protection (UU PDP)
In compliance with Undang-Undang Pelindungan Data Pribadi (UU PDP No. 27/2022), we ensure:
- Personal data is collected with clear purpose and legal basis
- Data processing is limited to stated purposes
- You may request access, correction, or deletion of your personal data
- We implement appropriate security measures to protect your data
- Data breach notifications will be provided within the legally required timeframe
7. Cookies
Capcher uses essential cookies required for the service to function, including authentication session cookies. We may use non-essential cookies for analytics with your consent. You can manage cookie preferences through your browser settings.
8. Account Deletion
You may delete your account at any time. Upon deletion, all associated personal data including your email, generation history, and preferences will be permanently removed within 30 days. Cached images not linked to your account are unaffected.
9. Contact Us
For data protection inquiries, access requests, or to exercise your rights, contact us at:
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of Capcher after changes constitutes acceptance of the revised policy.