SauceMatch
  1. SauceMatch
  2. Privacy

Privacy

The short version: your file stays on your device, bar a picture your browser cannot open, which goes to our server to be opened. A search sends fingerprints (lists of numbers) or a few frames of your file, and we never share anything. We count how the site is used, anonymously and without cookies.

What a search sends

  • Fingerprints or frames, never your file. Your browser picks the frames of your video, GIF or picture: up to 48 in the first pass, then a few more around near misses and, when nothing matched, mirrored copies of the best frames. On most computers it turns each frame into a fingerprint of 512 numbers and sends those numbers and the times of the frames. On phones and slower devices, and whenever that does not work in your browser, it sends the frames themselves (small pictures, with the file's name) and our search server does the same work. And if your browser cannot open a picture at all (some HEIC photos, or unusual formats), it sends the picture itself so our server can open and search it.
  • A face check when nothing is found. When a search finds nothing, your browser sends up to 12 of its frames, with the file's name, to our search server, which only looks for faces in them. If it finds one clear enough to search, the page suggests a face search. No check is made for 3 days after that suggestion was shown, or at all once you choose not to see it again.
  • A bot check. Searches and removal requests are protected by Cloudflare Turnstile, which checks in the background that a browser, not a script, is asking. Cloudflare processes that check under its own privacy policy.

Fingerprints are used to answer the search and then discarded: they are not stored, not added to the index and never shown to anyone. The answer lists indexed frames and videos. When your browser does the work, it then downloads those frames' thumbnails and checks them against your own frames, on your device; otherwise our server does that check. Frames sent to our search server, by a search like this or a face search, may be kept with the file's name to improve the index.

What a face search sends

  • A few frames, not your file. Your browser picks up to 64 frames of your clip (the frames of a GIF, or the pictures you chose, up to 64 of them) and sends those pictures to our search server, which finds the faces in them and turns each face into a face fingerprint of 512 numbers.
  • The faces come back to your browser. The answer lists the faces found, with their fingerprints; when you pick one, your browser sends those fingerprints back to search, and again for "search again". The server does not keep them between requests.
  • A limit per connection. To stop abuse, the server counts face searches per connection for ten minutes, using a scrambled form of your IP address held in memory only; it is never written down.

Usage counts

To see whether the site works and where it fails, it keeps anonymous counts of how it is used: which site you came from (its name only, such as google.com, never the page) and the campaign tag of the link, if it has one; whether your screen is phone-sized; the kind and format of the file you search and its rough size and length (never the file or its name), and, when your browser cannot open it, which step failed; whether a search found something and how long its steps took; which result you opened (the site it links to and its place in the list), whether a face search was suggested and whether you took it and, in a face search, which results you marked. The steps of one visit are tied together by a random number that is never stored in your browser and is gone when you leave the page. There are no cookies, and your IP address is not stored: the server uses it for a moment to limit abuse, as it does for searches. These counts never include your file, its frames, its fingerprints or its name.

What we do not collect

  • No account, no name, no email (unless you give one in a removal request or write to us).
  • No advertising trackers and no analytics scripts from other companies. The pages and their scripts come from this site; the only other scripts are Cloudflare's bot check. Cloudflare, which delivers the site, counts the requests it carries (pages, countries, device types); we keep only its hourly totals, never addresses.
  • No search history tied to you. For each search our server records the hour, how many frames it had, how close the nearest indexed frames were and how many results it found; it does not record your IP address, and it receives no file from you except a picture your browser cannot open, as described above. Requests reach it through Cloudflare, which handles them as described in its privacy policy.

Removal requests

A removal request stores what you type into the form (the links, your note and, if you give one, a reply address), so that we can act on it. It is not shared.

What your browser keeps

In your browser's local storage: that you confirmed you are 18 or older, whether you chose to show result thumbnails unblurred, when the face search was last suggested (or that you turned the suggestion off), and when the face search last showed its tip to add more of a face (or that you turned it off). When you take a search to the face search from that suggestion, your file is handed to that page through your browser's own storage, on your device, and removed from there as soon as the page opens it. In its cache, once it has run a search itself: the fingerprint network (about 25 MB), so that it is not downloaded again on your next visit. Clear your site data to remove them.

Links to other sites

Results link to the sites that host the videos. Those sites have their own privacy policies; the links are opened without telling them which page sent you.