Mosaic Pro privacy policy

Updated October 19, 2026. Mosaic Pro is provided by its developer, reachable at stayhpjing@gmail.com.

Local editing

Manual screenshot capture, image import, cropping, masking, undo and PNG export run on your device without an account. In the browser extension, images and edit history stay in editor memory. Captures transferred through browser session storage are removed after the editor reads them. Closing or refreshing the extension editor loses unsaved work. Mosaic Pro does not collect your browsing history or automatically capture pages in the background.

The web app and installed PWA save the current image batch, thumbnails, edit history, suggested tags and pending request identifiers in IndexedDB on your device so you can resume after a reload. Drafts expire after 24 hours and are removed when the app next opens. You can remove selected images or clear the batch earlier. Browser storage can be cleared by the browser or operating system; export anything you want to keep. Android photo shares, local ZIP import and explicit clipboard batch import are handled on the device, with no image relay through our server. The PWA caches public application files for offline manual editing; it does not cache account or billing responses. iPhone does not support receiving photo shares directly into a PWA.

Optional AI analysis

AI runs only when you request it. Before an upload, Mosaic identifies the processing destination and requests consent. The current cropped image, including existing masks, and any selected tag rules are sent to Mosaic AI, our AI analysis service. Mosaic AI uses third-party model providers to process the image and selected rules. The image may be resized. Consent is scoped to the browser session and destination. AI results are applied as editable masks; check the image before sharing because detection may miss content or place masks incorrectly.

Mosaic's application database and diagnostic logs do not retain raw screenshots, instructions, recognized text, reasoning or raw model responses. Coordinates, categories and tag IDs are cached for 24 hours. Suggested tag text stays in editor memory unless you save it as a local tag. Request identifiers, content hashes, status, timing and credit-ledger records support result recovery and credit accounting. Third-party model providers process uploaded content under their applicable terms and privacy practices. Contact stayhpjing@gmail.com for current processor information or questions about Mosaic AI data handling.

Accounts, sessions and payments

Google handles sign-in; Mosaic never receives your Google password. Mosaic stores account identifiers and verified email to manage your account and credits. The extension retains a rotating application refresh credential and verified email in trusted local extension storage, and short-lived access credentials in session storage. These are not synced. The web app instead keeps its access credential in memory and its rotating refresh credential in a Secure, HttpOnly, SameSite cookie. Short-lived encrypted login handoffs link Google sign-in back to the initiating app and expire within 10 minutes. Server-side refresh credentials are hashed. Sessions expire after 30 days of inactivity or 90 days total. Signing out clears local credentials and attempts to revoke the server session; it does not sign you out of Google.

Stripe hosts checkout. Mosaic does not receive payment-card numbers. Mosaic retains customer, order, payment and event identifiers and the ledger needed to account for credits, refunds and disputes. Credits are granted only after server-side payment verification. Account, trial and financial records are not deleted merely by closing the editor, signing out or uninstalling.

Third-party policies: Google, Stripe, and Cloudflare for service hosting.

Saved settings and data use

Tag names, rules and selections are saved locally. Custom-model setup is disabled in this release. Existing saved custom configurations or keys are unused, retained only on your device, and never sent to Mosaic. Previously remembered keys use local storage, which is not an encrypted vault.

Data is used to provide requested editing, AI, authentication and credit-purchase features. Mosaic does not sell your data, use it for unrelated advertising, or use it for creditworthiness or lending decisions. Images you choose to submit can contain personal information, communications, health or financial content; review the image and destination before uploading.

Access, deletion and support

For support, privacy questions, or a request to access, correct or delete account data, email stayhpjing@gmail.com from the email address used to sign in, with the subject “Mosaic Pro account data request.” Do not send passwords, tokens, card numbers or screenshots containing sensitive information. Account ownership is verified before a request is processed. A request is handled manually; the extension does not currently include an automatic account-deletion button. Any necessary retention of account-integrity or financial records will be explained when handling the request.

Uninstalling removes extension storage but does not itself request deletion of server-side account or billing records. Export your edited images before closing the extension editor or clearing a local web draft.

Policy changes

The updated date will change when these practices change. Material changes requiring new permission or consent will be presented in the application before the relevant processing begins.