Privacy

What happens when you analyse a photo

When you choose a photo and press the analyse action, your browser prepares a JPEG copy (longest edge no more than 1,600 pixels) of it. The prepared copy, the metadata fields recorded in the original file and any context you typed are sent from your browser to the ShotAgain Worker, then to the Qomza Gateway, then to a configured AI provider that produces the coaching. Your original full-resolution file is not uploaded; the prepared copy is.

The Worker forwards your connecting IP address, as provided by Cloudflare, on a trusted path to the Gateway.

Server-side records

Qomza Gateway archives complete non-secret requests, results, media and diagnostics. These records are private and are not automatically deleted; they remain until the Gateway operator removes them. We do not promise temporary storage or automatic deletion.

What stays on your device

Photo selection, preparation and preview happen in your browser before anything is sent. Feedback drafts, a queued feedback outbox and your analytics choices are stored only in this browser's local storage. Clearing browser data removes them on this device only; it does not recall or delete records already submitted to the Gateway.

Optional analytics and separate diagnostics

On the production site, optional PostHog analytics and session replay help us understand page visits, public clicks and site performance; they are not used for advertising. The site's consent controls let you turn analytics and replay off, and your browser's Global Privacy Control signal turns both off. Replay is configured to exclude selected photos and private content. PostHog receives optional capture through its European service; rejecting stops new capture and clears its local identifiers, but does not delete historical provider records.

We separately use Sentry for operational diagnostics such as error types, routes, durations and request identifiers. Sentry does not receive photos, context text, feedback content, email addresses, cookies or page replay. Analytics choices do not change Sentry diagnostics, Cloudflare hosting and security logs, or the Gateway records described above. Cloudflare also processes the Turnstile bot check used to protect the analyse action.

Requests and contact

To ask about or request deletion of server-side records associated with a request, email hello@qomza.com and include the request ID shown with your result if you have it.

ShotAgain is operated by Qomza, LLC, a Delaware limited liability company, 2810 N Church St, STE 90651, Wilmington, DE 19802, United States. Questions or requests: hello@qomza.com.