Operator and contact
This website and its image playground are operated by Griffonix.inc. For privacy questions, a correction or a request to remove a test message, contact ivan@griffonix.com. Include the watermark ID when requesting removal; do not send a sensitive image by email.
HTTPS and public test content
The website and playground use HTTPS to encrypt traffic in transit. Use only images and text you are comfortable making public. Do not submit personal, confidential or third-party private material.
Images and test messages
- Mark and Verify send the image to our AWS server in Oregon, United States, for the operation you request.
- The image is decoded and processed in memory. The application does not retain uploaded or output image files. Your browser holds its local preview and downloaded result.
- Mark creates an identifier and stores the identifier, your test message and an expiry time in a demo database. The watermark carries the identifier, not the message text itself.
- Your message can be read by anyone who supplies an image from which the identifier is recovered. Do not use this field for personal data or secrets.
- Verify decodes a supported watermark and looks up that identifier. It does not create a new visitor message record.
Retention
Visitor-created message records expire after seven days. Expired rows are removed on access and by a periodic cleanup that normally runs every minute while the service is operating. After expiry, the identifier may still be detectable in the image, but its demo message is no longer available. Removing a registry message does not remove the watermark from a copy of the image.
Our own published hero image has a maintained public example record, separate from visitor submissions. That record remains available while we maintain the sample; it is not subject to the visitor seven-day expiry.
Operational records
The application logs random request IDs, operation, status, duration and error type; it does not log image contents, test messages or uploaded filenames. Normal web access logging is disabled. Infrastructure and error logs can contain connection details, including IP addresses, for diagnosis and security. Operational log retention follows the host and container rotation settings; it is separate from the seven-day message expiry.
Analytics and external destinations
We do not currently run advertising trackers, third-party analytics, analytics cookies or a visitor account system. The website serves its fonts and assets locally. Following GitHub, legal-source or other external links takes you to a separate service with its own policies. Email sent to our contact address is handled separately from the demo database.
Scope
This notice describes this hosted playground. A self-hosted SDK, verifier or registry runs under its deployer's data practices. The playground checks an image watermark and a test-message lookup; it does not certify legal compliance, authorship, truth or a trusted C2PA issuer.