Local-first privacy tools for people who don't want their photos snitching on them.
ScrubAI is an independent project. We build software that strips everything from your images that you didn't put there yourself - EXIF, GPS, IPTC, XMP, and signed C2PA Content Credentials - entirely inside your browser.
Modern image files leak more than you think.
Every photo your phone takes carries hidden passengers. GPS coordinates from where it was shot. The exact camera model and serial. Software fingerprints. Sometimes a thumbnail of an earlier crop. Often a cryptographic chain that proves the file came from an AI model.
Most of this data was added quietly, without anyone asking you. And it travels - to social platforms that read it for their own ranking, to anyone who downloads your file, to anyone who inspects it later.
Stripping that data shouldn't require a desktop app, a paid subscription, or a server upload. It should be instant, free for the simple case, and never leave your device. So we built ScrubAI.
Three things we do that most tools don't.
100% in your browser
The canvas pipeline runs in your browser sandbox. Your image bytes don't go over the network. Not to us, not to anyone.
How local-first worksPixel redraw, not tag deletion
Most cleaners only erase common headers. We rebuild the file from raw pixels, so deeper structures like JUMBF blocks vanish too.
The technique behind redrawC2PA & 'Made with AI' tags
Cryptographically signed Content Credentials embedded by Adobe, OpenAI, and Midjourney are removed at the source.
What C2PA actually isThe rules we hold ourselves to.
- Your image bytes never leave your device.
Not to our servers. Not to a third party. Not for analytics. The canvas pipeline is local-only and that's a hard product invariant.
- No subscriptions. One-time payment.
Lifetime Pro is paid once. We'd rather earn your trust than rent your attention.
- We track product usage, not your content.
We use PostHog for UI events like 'pricing viewed' or 'checkout completed.' We never log filenames, image bytes, or extracted metadata.
- Open about what we do.
Our processing approach is documented in our docs. Our privacy policy explains exactly what data exists and why.
- If we ever break these rules, we'll say so first.
Any change that affects what data we touch ships with a public note. No silent updates to the privacy contract.
No investors. No data brokers. No agenda.
ScrubAI is built and maintained independently. There's no venture capital pushing for growth at the cost of the privacy promise, and there's no one upstream getting access to your data through us - because we don't have any of it ourselves.
That keeps us honest. The product can grow at the pace it deserves to grow, and the moment something feels off you'll hear from us first.
Read the fine print. We mean it.
Try it. No account required.
The simplest way to understand what ScrubAI does is to drop an image into it. Five free cleans a day, no sign-up.