Prioritizing security and privacy at remover.bg

At remover.bg, security and data privacy come first. To offer a fast, high-quality background-removal tool that you can build real work on top of, we take our responsibility for your images and personal data seriously. Being transparent about how that data is handled is part of the product, not an afterthought.

If you want to understand exactly how we protect your images and your account, keep reading. Below you'll find plain answers to the questions people ask us most.

Table of contents

• Your images, your privacy
• Encrypted connections
• Accounts and access
• Keeping your data isolated
• Processing on our own infrastructure
• Your rights and our commitment
• Learn more

Your images, your privacy

The most common question we get is simple: do my images stay on your servers? The short answer is no, not for long.

• Results are automatically deleted after 24 hours. Every processed image has a hard expiry, and it's removed automatically once that window passes, no action needed on your part.
• We don't hold on to your uploads. For anonymous use, the original image you upload is removed within a day.
• We never train on your images, and we never sell them. Your uploads are used to produce your result, and nothing more.

In other words, remover.bg is designed so there's no long-term pile of your image data sitting around to be lost, leaked, or misused.

Encrypted connections

Your data is protected in transit. remover.bg is served strictly over HTTPS, so everything travels over encrypted, secure channels.

We enforce this with HSTS (HTTP Strict Transport Security), which tells browsers to only ever connect over HTTPS. On top of that, we ship a full set of security headers, including a strict Content Security Policy, protections against clickjacking (X-Frame-Options), MIME-type sniffing (X-Content-Type-Options), and a tight referrer and permissions policy.

Accounts and access

Your account is protected by modern, well-established authentication:

• Sign in your way. You can use Google sign-in or an email and password. Passwords must be at least 8 characters, and we never store them in plain text, they're securely hashed.
• API keys are stored safely. If you use our API, your key is only ever stored as a hashed value, never as the raw key. That means even we can't read your key back out of our systems.
• Access is scoped to you. Your results are stored under your own account, and only reachable through your session.

Keeping your data isolated

We keep a clear boundary between the public web app and where your images actually live. Your browser never talks to our object storage directly, all access goes through our backend, over an authenticated internal channel.

Results are stored under a per-account path, so your data stays separated from everyone else's, and communication between our internal services is authenticated with shared secrets over a private network.

Processing on our own infrastructure

Background removal runs on our own dedicated GPU infrastructure rather than being handed off to a third-party image service. If our primary processing node has a problem, requests automatically fail over to a backup, so the service keeps working without exposing your images to unnecessary hands.

Your rights and our commitment

We're committed to protecting your personal information and keeping you in control of it.

• Clear policies. Our Privacy Policy, Terms of Service, and Cookie Policy spell out what we collect, why, and how it's handled.
• Your data, your call. You can request access to, or deletion of, your personal data at any time.
• No hidden uses. As stated in both our Privacy Policy and Terms, we don't use your uploaded images to train models, and we don't sell your data.

Learn more

We want your experience with remover.bg to be fast, dependable, and private. If you'd like the full details on how we handle your data, read our Privacy Policy, or reach out to us with any questions, we're happy to walk you through it.