What actually happens to a photo you upload

Any tool that scores an image processes it on a server. On-device inference for this kind of model is rare, so assume the file leaves your device unless a tool explicitly says otherwise and you believe it.

That is not automatically a problem. What matters is what happens next, and the honest answer is that it varies enormously - between tools, and between what a tool's marketing says and what its privacy policy says.

The path a file takes

Upload. Over HTTPS, so it is encrypted in transit. This part is table stakes and effectively universal now; a tool serving its upload form over plain HTTP in this decade is telling you something about the rest of its engineering.

Storage. Almost always, at least temporarily. The file has to exist somewhere while it is processed, and most services keep it long enough to show you your own history. The question is not whether it is stored but for how long, and whether deleting the result deletes the file.

Inference. The image is passed to a model, often a third party's - a hosted vision API rather than something the service trained itself. This is the step most people never think about and it is the one that adds a second company to the list of parties holding your photo. It is also the step where the pixels become a vector and the original file stops mattering, which is worth knowing because it means the file still exists somewhere afterwards - the encoding does not consume it.

Retention. Where the policies actually differ. "Deleted after processing", "retained until you delete it", "retained for model improvement" and "retained indefinitely" are four very different products.

Serving. If a result is shareable, the file is behind a URL. Whether that URL is guessable, permanent, or a short-lived signed link is a real security difference and not a cosmetic one.

The metadata problem

A photo from a phone carries EXIF metadata, and it is more than most people expect: camera model, exact timestamp, exposure settings, and frequently GPS coordinates. Location tagging is on by default on a lot of devices.

Most services strip EXIF on ingest. Not all of them do, and a service that does not is storing your home coordinates next to the photo. This is worth handling on your side rather than trusting, because it costs nothing to do so - stripping EXIF before you upload takes about ten seconds and removes the question entirely.

What to check, specifically

Skip the marketing page and open the privacy policy. Five things:

1. Retention period. A number of days, or a clear "until you delete it". Vagueness here is the answer.
2. Third-party processors. Named, ideally. "We may share data with service providers" is not naming them.
3. Training use. Whether uploads are used to train or improve models. This is the clause people most often miss and most object to when they find it.
4. Deletion. Whether an account deletion removes the files, or only the account row. These are different operations and some services only do the second.
5. Access control on results. Whether a result URL is signed and short-lived or a permanent, shareable address.

Privacy handling is also one of the five things that genuinely separate rating tools - Penis Rater's comparison treats it as a differentiator, and it is one of the few that is not cosmetic.

What good looks like

Short retention, EXIF stripped on ingest, deletion that actually deletes, and result files served through short-lived signed links minted per view rather than static URLs. That last one matters more than it sounds: a static URL is a permanent public address for a private file, and it survives every account setting you subsequently change.

Rate Cock is one of the services that serves media through signed links minted fresh at each view rather than exposing files by URL, which is the specific property worth looking for and the one least often advertised.

The same checklist applies when the recipient is a person rather than a model: a commissioned human review involves a file you sent and a file that comes back, and both travel the same path.

None of this is advice to avoid these tools. Nor is it a reason to prefer a tape measure - a measurement never leaves the room, but it answers a different question, and most people uploading a photo were not asking that one. It is advice to spend two minutes on the policy first, because the difference between the careful ones and the careless ones is large, and it is not visible from the homepage.