Who is responsible
Stormberry AS, a Norwegian limited company (aksjeselskap) registered in Askøy, Norway, organisation number NO 937 751 249, publishes MetadataScrubber and is responsible for it. Contact: info@stormberry.as
Your photos stay on your device
MetadataScrubber reads, changes and saves your photos on your own device: in your browser on this website, or inside the Android app. Your photos are never uploaded, to us or to anyone else. There is no server that receives them.
The page also carries a security policy that tells your browser to block the ways a web page sends data: network requests and form submissions. You can check it yourself: once the page has loaded, turn off your internet connection and the tool keeps working.
On this website, on a phone or tablet, Take a photo opens your device's camera app. The photo it returns can carry details your camera app adds, such as the date, the device model or the location; the page lists them like any other picture's.
The Android app runs the same page, bundled inside it. It asks for one permission, the camera, and only when you tap Take a photo. It has no internet access, so it cannot send anything anywhere. You choose pictures through Android's own file picker, or share them into the app from your gallery, and Android lets it read only the pictures you choose. The app also tells Android's built-in web view, which shows the page, not to send usage statistics to Google, and switches off its Safe Browsing lookups.
A photo you take in the app is made on your device without a location or device details. It stays inside the app until you save, share or copy it, and it is not added to your gallery. The app keeps it in its private storage only until the page has opened it, then deletes it; after that it is held only in the app's memory, until you close the app or tap Start again.
What we receive
Nothing from your use of the tool. We do not see your photos, what they contain, which details you remove or what you do with the result. There are no cookies, no analytics and no tracking, no advertising and no third-party scripts, and the typeface comes from this site.
One thing is kept on your device: when you close the first-run notice, your browser, or the Android app, stores the date and time in its local storage, so that the notice does not appear again. It never leaves your device, and we cannot see it. Clearing your browser's data for metadata.stormberry.as, or uninstalling the app, removes it. The Android app keeps all its data out of Android's backups.
The website itself is stored by GitHub (GitHub Pages) and delivered through Cloudflare, like the rest of stormberry.as. As with any website, they see each request: your IP address, the address of the page and what your browser sends with it, such as its name and version. Cloudflare does this on our behalf; GitHub keeps its own logs for its own security purposes. We can see the overall traffic totals Cloudflare counts for our sites, such as the number of requests; they do not tell us who you are or what you did on the page. Who these providers are and what each keeps is set out in our company privacy policy, sections 4 and 11.
Sharing and copying
Where your browser supports them, Share hands the new file to your device's own share sheet, and Copy image puts a fresh copy of the picture on your clipboard, without the file's details. In the Android app, Share opens Android's share sheet, and Copy image puts the picture on Android's clipboard for 2 minutes, after which the app deletes it and it can no longer be pasted. Either way, the file goes straight from your device to the app you choose, and nothing passes through us. Once you have shared or posted it, it is in the hands of that app and the people you share it with, and out of ours.
The Android app keeps the new file in its own private storage only while you save or share it. Once you have saved it, or closed the save screen without saving, it is deleted straight away. A shared one stays for 10 minutes, so that the app you shared it with has time to read it; after that it can no longer be read, and the app deletes it.
Where you got the app
Zapstore. Zapstore finds the app through our signed listing on Nostr, an open network of relays, downloads the file from our releases page on GitHub and checks it against our signed listing. GitHub sees that download as it sees any other, under its own privacy statement, and counts how often each file is downloaded; that count is all we can see. Zapstore and the relays it uses work under their own terms. We receive nothing else.
Google Play. If you install the app from Google Play, Google handles the download and installation under its own privacy policy. Google gives us statistics in its console for developers, such as the number of installs and reports of crashes, in a form that does not tell us who you are. The app itself has no internet access and sends nothing, to Google or to us.
Your rights
Because we receive nothing from your use of the tool, we hold no data about you from it to give you, correct or delete. If you write to us, our company privacy policy explains what happens to your message, and your rights under the GDPR and the Norwegian Personal Data Act (personopplysningsloven). You can also complain to the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no). Questions about this page: info@stormberry.as
Changes to this page
If anything here changes, we update this page and the date below. The Android app carries the copy that was current when that version was built; the latest is always at metadata.stormberry.as/privacy.html.
Last updated: 11 October 2026