Home › Privacy

← Back to the tool

Last updated: 8 October 2026

What the numbers behind this page actually look like

Retention policy is easy to write; whether it matches reality is a separate question, so here is what we logged over the 38 days from 15 July to 21 August 2026: zero jobs failed partway through and had to be cleaned up as an error. The automatic cleanup this page describes rarely has an edge case to handle, because 23 uploads never reached processing at all. Those 23 were rejected outright (wrong file type, too many pages, or a scan uploaded where real text was expected) before the file was ever handed to the cleanup step, so there was nothing generated to retain in the first place. That's out of 3,950 page views from 257 real visitors across 27 countries in the same window: a small, specific number rather than a vague "many users," because a privacy page should be checkable against something real, not just a promise. This same 38-day window is what every other figure on this page traces back to, not an estimate or a marketing rounding.

How your files are handled

When you clean a document, the files pass through a short, self-cleaning lifecycle:

• Original uploads are deleted right after successful processing. Once your document has been processed, the file you uploaded is removed.
• Intermediate working files are deleted as soon as the job finishes or fails. Any temporary files created while cleaning your document are cleared immediately once the job completes or stops.
• Result files stay downloadable for up to 45 minutes, then are automatically deleted. This gives you time to download your cleaned result before it is removed for you.
• In the scanner, a "Delete now" button lets you delete your result immediately at any time. You don't have to wait for the automatic cleanup: one click removes your result straight away. The separate PDF tools have no such button; their results are deleted automatically after 45 minutes.
• Failed or abandoned jobs are cleaned up automatically. If a job errors out or you leave without finishing, its files are removed by the same cleanup process.
• Uploads and results are never included in our backups. They exist only for the short time described here.
• Screenshots sent with "Report a problem" are deleted after 30 days. The screenshot box is ticked by default; untick it if you don't want to send one.
• If you tick “Also send my file and the result” in that window: the file you chose and the result of your job are stored for 30 days and used only to reproduce and fix the problem you reported. They are not shared, not included in our backups, and you can ask for earlier deletion at info@shinobitools.com. Basis: fixing the problem you reported (Art. 6(1)(f) GDPR); the box is ticked by default and you can untick it.

Files you choose to send us

Next to a result, you can click “Share these 2 files” to help us find mistakes our tests don’t catch. This is entirely optional and off by default.

• What we ask for: the one file you uploaded and the result we gave you, and nothing else: only the part we need: up to 30 seconds of audio, one page of a PDF, or an image with the location data (EXIF/GPS) removed.
• Faces: a separate checkbox, off by default, where you confirm the file shows faces and everyone in it agreed, with no children in it. Without it, faces are blurred or the file is refused.
• Why: to find mistakes our automatic tests don’t catch, and turn real ones into new test cases.
• Legal basis: your explicit consent (Art. 6(1)(a) and, for special-category data such as faces, Art. 9(2)(a) GDPR). For other people who may appear in your file, our legitimate interest with strict minimisation (Art. 6(1)(f) GDPR).
• How long: at most 30 days, then it is deleted automatically.
• Withdraw any time: you get a one-time code on screen. Enter it whenever you like and we delete the pair, its label and the consent record immediately: as easy as giving it.
• Who sees it: one person on our team, and nothing else. A local AI model only adds a label for the kind of mistake, never a description of a person, and it never leaves our own computer.
• What we never do: we never store your IP address, filename or email with it; never train or fine-tune any model on it; never share it with anyone else, publish it, or offer it through the API; and never use it to identify or score anyone.

Logs

The service keeps basic operational logs to run and troubleshoot the tool. Logs never contain original filenames, document content, or OCR text. Nothing that could reveal what your document says is written to a log.

What we never do

Files are never used for AI training and are never sold or shared. Your documents are processed to clean them for you, and for nothing else.

No account needed

You can use ScanReviver without signing up or logging in. There is no account, so there is no profile of you tied to your files, apart from the random statistics number described below.

Visit counts

The site counts visits and tool runs per day: a light page-view beacon and tallies of how often each tool is used. To count unique visitors we store a shortened code derived from your IP address, not the address itself. These daily counts are deleted after 60 days. We do not use them to build profiles or to follow you across the web.

To count returning visitors and understand how the tools are used over time, we set one first-party cookie with a random number. The number is not derived from your IP address or your device, and the cookie lasts 13 months. We store it only in a scrambled form that we cannot link back to the cookie without a secret kept on our own server. It is used for our own statistics only, never shared and never used for advertising or any other purpose. We do not set it if your browser sends Do Not Track or Global Privacy Control. You can stop it at any time by clearing your cookies or with the opt-out button below. Data of individual visitors is deleted after 13 months; aggregated counts without any identifier are kept. Nothing changes in the short daily code made from your IP address that we use for our other usage counts: those counts are still deleted after 60 days.

Switch statistics off for this browser

IP addresses & rate limits

To keep the free tool available and prevent abuse, the service briefly uses your IP address to enforce limits (how many documents you can process at once). This is used only for rate-limiting and basic abuse prevention, not to identify you or build a profile.

To protect the service, if one address sends many rejected uploads in a short time (20 files over the size or format limit within an hour), we block uploads from that address for 24 hours. For this we keep a scrambled form of the address (a different code from the daily one, because the block must outlast the day) for at most 24 hours, and it is never used for anything else.

Who processes your data

ScanReviver runs behind Cloudflare, which carries the traffic between you and us and provides security and HTTPS. Your uploads pass through Cloudflare on their way to us, and Cloudflare may process connection metadata (such as your IP address) to deliver the site. The processing itself happens on computers we operate ourselves, as explained in the next section. Emails are delivered by Resend, and feedback reports are sorted with help from Anthropic, as described below. We do not sell your files and do not share them with anyone else.

Who we are, why we process data, and for how long

ScanReviver is run by ShinobiTools, registered with the KvK (Dutch Chamber of Commerce) under number 42147182. Questions and requests: info@shinobitools.com. This is everything we process, the legal basis under the GDPR (and the UK GDPR), and how long we keep it:

• Processing your file as you asked. Basis: performing the service you request (Art. 6(1)(b) GDPR). Your upload is deleted right after processing and the result 45 minutes after it is ready: the same on the free tier and with any pass. An upload you leave unfinished in the scanner is deleted after an hour without activity, and anything left over from an interrupted job after 24 hours at the latest.
• Limits, security and usage counts. Basis: our legitimate interest in keeping the free tool available and safe from abuse (Art. 6(1)(f) GDPR). Your IP address is used to enforce the limits. For the daily counts we store a shortened code derived from your IP address, never the address itself; those daily counts are deleted after 60 days. Measurements of how big or long a file was (a number with the same shortened visitor code: no file name, no content) are kept to set fair limits.
• Contact form. Basis: our legitimate interest in answering your message (Art. 6(1)(f) GDPR). Messages are deleted automatically after 180 days at the latest.
• The "Feedback" button ("Report a problem"). Basis: our legitimate interest in seeing and fixing the problem you report (Art. 6(1)(f) GDPR). A report can include a screenshot of the page; that box is ticked by default and you can untick it before sending. Screenshots are deleted after 30 days. To sort reports, an AI model from Anthropic (Claude) reads the text of your message, not the screenshot.
• Email list and free monthly pass. Basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with the unsubscribe link. Kept until you unsubscribe; what remains after that is described under Email list.
• Advertising and analytics cookies. Basis: your consent through the cookie banner (Art. 6(1)(a) GDPR). Google AdSense uses them to show and measure ads. In the EEA and the UK, Microsoft Clarity, which records how the pages are used, only loads after you consent.
• Google Fonts: the typeface used on this site is loaded from Google's servers (fonts.googleapis.com and fonts.gstatic.com) as a page opens, so Google receives your IP address and browser details with that request. We use it to show the pages in the intended typeface. See Google's privacy policy.
• YouTube: the demo videos on some pages are played by YouTube (Google). Nothing is loaded from the YouTube player until you press play; then the video is loaded from youtube.com, which receives your IP address and may set its own cookies. On some video pages the preview picture is loaded from YouTube's image server (i.ytimg.com) when the page is shown. See Google's privacy policy.
• Stripe: if you buy a pass, you pay on Stripe's own checkout page, not ours. Your card details go to Stripe under its privacy policy, and we never see them. We receive confirmation that the order was paid, its order number and the e-mail address you entered.

Where it runs. Your files are processed on computers we operate ourselves. Most of the work happens on the web server itself; some heavy jobs, such as the AI translation, summaries and chat, can run on another computer of ours. No outside service processes your documents; the traffic passes through Cloudflare on its way to us (see above).

Backups. Uploads and results are never included in our backups.

Your rights and complaints. Your rights are listed under Your rights. If you think we handle your data wrongly, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or to the supervisory authority where you live.

Email list

You can leave your email address to get a code that takes 10% off a Pro pass. If you also tick the box under it, we email you when there is a pass code or a new tool. Those are the only reasons we ask for it. The tools work without it: nothing here needs an account, and nothing is hidden behind giving us your address.

We store the address, when you signed up, which site you signed up on, the IP address you used, and the exact sentence that was shown next to the box when you ticked it. That last part is the proof that you asked for this, which is what the law expects us to keep. There is no separate confirmation click. Every email has a one-click unsubscribe link that deletes the address, so if someone else entered yours, one click removes it. The 10% code sets one cookie (shinobi_korting) for 48 hours, only so the checkout knows the discount applies.

The emails themselves are delivered by Resend (Resend, Inc.), which sees the address in order to deliver the message and nothing else. We keep your address until you unsubscribe.

Every email has an unsubscribe link that works in one click, without logging in. Use it and your address is deleted, together with the emails we already sent you, and we stop emailing you; all that stays behind is a one-way hash of the address, so we can show that we honoured it. We never sell, rent or share the list, and we don't use it to follow you around the web.

Advertising

When ads are shown here, third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google’s use of advertising cookies enables it and its partners to serve ads based on those visits. You can opt out of personalised advertising in Google’s Ads Settings, and opt out of some other vendors’ advertising cookies at www.aboutads.info.

If and when ads are shown, they are served by Google AdSense, which may use cookies to show and measure ads. You can learn more from Google's advertising policies.

Contact form

If you use the contact form, the message you send (and your email address, if you provide one) is stored so we can read it and reply. It is used only to handle your message, is not used for marketing, and is kept no longer than needed to deal with your request; in any case it is automatically deleted after 180 days. Please only include what you're comfortable sharing.

Security

In production, data is sent over HTTPS between your browser and the service. We do not claim end-to-end encryption: files are decrypted on the server so they can be processed, and then deleted as described above.

Your rights

Depending on where you live, you may have the right to access, correct or erase your personal data, to object to or restrict certain processing, and to data portability. Because we keep so little (your files are gone within the times described above and there is no account), there is usually very little to act on. If you have sent us a contact message, you can ask us to delete it. You can also complain to a supervisory authority, as described above.

Making a privacy request

To make any privacy request, reach us through the contact page. To act on a request about a specific cleaned document, contact us within the 45-minute window while the result still exists: after that it has already been deleted.

Questions

If you have any privacy questions, reach us through the contact page.