Your files are yours. We just read them, once.

In short

• Your file is analysed in memory and discarded as soon as your report or clean copy is ready.
• Files are never written to disk, never kept, and their contents are never logged.
• Reports are not stored on our side. They exist only in your browser tab.
• No accounts, no cookies, no advertising, no tracking scripts, no third-party fonts. Only anonymous usage counts.
• We never sell or share your files or what’s in them.

What happens to your file

1. Upload. When you choose a file, your browser sends it to Metvoro’s server over an encrypted HTTPS connection. Files up to 25 MB are accepted. Larger uploads are cut off and rejected.
2. Identification. The server checks what the file really is from its contents, not its name. Unsupported files are rejected without being analysed.
3. Isolated analysis. The file is handed to a separate worker process that has no access to configuration secrets, a strict memory limit and a hard time limit. If a file is malformed or designed to cause trouble, only that worker is stopped.
4. Report. The worker returns a report of the metadata it found. Every value is treated as untrusted text and shortened if necessary.
5. Discarded. The report is sent to your browser and the file is released from memory. Nothing is written to disk at any point.

Your report

The report is displayed in your browser and is not kept by Metvoro. Closing or refreshing the tab removes it. “Download report” creates the JSON file on your device without contacting our server.

If a photo contains a location, Metvoro shows the coordinates but does not load a map. The “Open in OpenStreetMap” link takes you to an external site only if you click it.

Image previews in the report are created locally by your browser from the file you selected. They are not uploaded again.

Clean copies

When you choose “Download clean copy”, your browser sends the same file again. It is processed the same way: in memory, in an isolated worker, with the same limits. The cleaned file is sent straight back to your browser and is not kept. Metvoro re-reads the clean copy in that same worker to tell you what’s left in it.

Other data

To prevent abuse, Metvoro counts how many files each connection analyses in a short period. This uses your IP address, kept only in server memory for up to 10 minutes and never written to disk by Metvoro.

To understand how Metvoro is used, we record anonymous counts for each request: whether it was an analysis or a clean copy, the outcome, the detected file type, a size range such as “1–5 MB”, and how long it took. These records never include file names, file contents, metadata values, IP addresses or any identifier, and there are no cookies.

Like almost every website, the infrastructure that hosts Metvoro may record standard access logs, such as IP address, time and requested page, for security and reliability. These logs never contain your file or its contents.

Safety measures

• File type decided by content, with a fixed list of supported formats.
• Upload size limit enforced while receiving, before the file is processed.
• Per-file memory and time limits, and a cap on how many files are analysed at once.
• Protection against compressed “zip bomb” documents and oversized internal parts.
• XML read without external entities or entity expansion.
• Rate limiting per connection.
• A strict content security policy that blocks third-party scripts, frames and connections.

Limits of this promise

Metvoro reads what a file says about itself. Metadata can be wrong or deliberately edited, and our interpretation can be mistaken. Treat the report as a careful reading of the evidence, not as a forensic or legal opinion.

If a future version introduces optional features that work differently, such as saving reports to an account, they will be opt-in and described here before they launch.

Metvoro is operated by Tadas. Questions about privacy: tadmar128@gmail.com