Your photo never leaves this device

Privacy

Last updated 10 Oct 2026

The short version

  • Your photos and documents never leave your device. Maru processes them inside your browser. We never receive, store or see them.
  • We show ads from Google to keep Maru free. Google may use cookies; where the law requires it, we ask for your consent first.
  • We count visits with privacy-friendly analytics that don’t identify you.

1. Who we are

Maru (maru.daeq.in) is a free tool operated by daeq, based in India. Contact: maru@daeq.in.

2. Files you process

Images you open in Maru are processed locally by your browser. They are not uploaded to our servers or anyone else’s. When you close or reload the page, they are gone. We can’t recover them because we never had them.

3. Information stored on your device

We use your browser’s local storage only for convenience: your theme choice and the last custom rules you typed. You can clear it anytime in your browser settings. It is never sent to us.

4. Analytics

We use Cloudflare Web Analytics to count page visits. Cloudflare states that it “does not collect or use your visitors’ personal data.” We also count a few anonymous tool events (for example “a result was downloaded”) using our own endpoint. Each event contains only the event name and the page. It never includes file contents, file names, your IP address or any personal information, and we don’t store IP addresses for these events.

5. Advertising

We use Google AdSense to show ads. Google and its partners may use cookies or similar technologies to show ads based on your visits to this and other sites. You can manage personalised advertising at adssettings.google.com. Learn how Google uses data at policies.google.com/technologies/partner-sites.

If you’re in the EEA, the UK or Switzerland, we ask for your consent through a Google-certified consent tool before personalised ads are shown. You can change your choice anytime via “Privacy choices” in the footer.

6. “Report a wrong rule” form

If you send a report, we receive what you type: the page, what’s wrong, the correct rule, an optional source link and an optional email address. The form is delivered by Web3Forms, which processes the message to email it to us. We use your email only to reply, and delete reports within 90 days. The form never accepts files.

7. Spam protection

The report form may use hCaptcha, which collects information about your device to tell people from bots. See hCaptcha’s privacy policy.

8. Hosting

Maru is served by Cloudflare. Like any web host, Cloudflare processes technical data (such as IP addresses) to deliver and protect the site.

9. Your rights and how to complain

Depending on where you live (for example under the GDPR, UK GDPR, or India’s Digital Personal Data Protection Act 2023 and Rules 2025), you may have rights to access, correct or erase personal data we hold about you, to withdraw consent, and to nominate someone to exercise your rights.

  • What we may hold: only an email address you choose to give in a report, used only to reply.
  • Withdraw consent: for ads, use “Privacy choices” in the footer; for a report, email us and we’ll delete it. Withdrawing is as easy as giving consent.
  • Contact and grievances: the Maru team at maru@daeq.in. We respond within 30 days.
  • Complaints: if you’re in India, you can complain to the Data Protection Board of India after contacting us. In the EEA or UK, you can complain to your data protection authority.

10. Children

Maru is not directed at children under 13. We don’t knowingly collect their personal data.

11. Changes

We’ll update this page when our practices change and show the date at the top.