Controller
MMR Labs GmbH, Carl-Benz-Straße 6, 89269 Vöhringen, Germany. Email: info@liquiflow.app
In brief
- We set cookies only for signing in to the free account. Both are technically necessary. There is no tracking, no visitor statistics, no analytics or advertising services. That is why there is no consent banner.
- We load no scripts, fonts or images from third-party servers. The Inter font is hosted on our own server.
- The tools run in your browser. Images you open there are not sent to us.
- We process personal data when a page is requested (server logs at Cloudflare), when counting free images (only a salted hash of your IP address), for the free account (your email address) and when you write to us.
Hosting with Cloudflare
The website consists of static pages and a few server functions for the free account. Both run on Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare acts as our processor (Art. 28 GDPR).
When a page is requested, Cloudflare processes technically necessary data: IP address, time, requested address, amount of data transferred, browser and operating system, and the previous page if your browser sends it. No page can be delivered without this data. It also serves security and protection against attacks. The legal basis is our legitimate interest in secure and reliable operation (Art. 6(1)(f) GDPR). We do not use this data for statistics and do not combine it with other data.
Cloudflare may process data in the USA. Cloudflare is certified under the EU-US Data Privacy Framework. The data processing agreement with Cloudflare includes the EU standard contractual clauses.
Tools in your browser
Adding a label, checking and writing metadata, the labelling check and the other tools run entirely in your browser. Images are not uploaded and not sent to us. Your answers in the labelling check are also evaluated by your browser. Files you download are created on your device.
Free images without signing in
With “Label an AI image” you can download up to 3 images per internet connection in 30 days without signing in. To count them, your browser tells our server which kind of label you chose when you download. The image and its file name are not sent. We store a salted hash of your IP address, the kind of label and the time, not the IP address itself. We delete these entries automatically after 31 days. The legal basis is our legitimate interest in distributing the free offer fairly and protecting it from abuse (Art. 6(1)(f) GDPR).
To prevent abuse, we also limit how often a connection can call our server functions within a short time. For this, too, we store only salted hashes and delete them once the time window has passed.
Free account and sign-in
For more images you create a free account. There is no password: you enter your email address, and we send you a 6-digit code valid for 10 minutes. We store your email address, when you created the account and how many images you labelled with it (kind of label and time, no images). Sign-in codes and sessions are stored only as hashes. The data is kept in a Cloudflare database (Cloudflare D1), see “Hosting with Cloudflare”. The legal basis is providing the account you create (Art. 6(1)(b) GDPR).
We send the sign-in code through the email service Resend (Resend, Inc., USA) as our processor. Resend processes your email address and the content of the message for this. The transfer to the USA is based on the EU standard contractual clauses.
When you request a code, we set a technically necessary cookie for 15 minutes (__Host-al_login) that binds the code to your browser. After signing in, we set a technically necessary session cookie (__Host-al_sitzung, 30 days) so you stay signed in. Neither is used for tracking. The legal basis for storing them in your browser is Section 25(2) no. 2 TDDDG.
If you go to sign in from the tool, it briefly keeps your image and settings in your own browser's storage (IndexedDB) so they are there again after signing in. The image never leaves your device. The entry is deleted as soon as you return and discarded after 30 minutes at the latest.
You can delete your account yourself at any time on the account page. This deletes your email address, your sessions and the count of your images.
Notification when an app launches
On some pages you can ask to be notified as soon as our app is available for a particular store system. A button opens a prepared email in your email program. There is no form and no database on this website: we only receive something once you send the email yourself.
We then process your email address and the content of your message, for example the store system and, if you provide it, your store's address. We use this information only for that one notification and to answer questions, not for advertising or any other purpose. The legal basis is your consent (Art. 6(1)(a) GDPR), or Art. 6(1)(b) GDPR where your request concerns a contract.
The email is kept in our mailbox at our email provider. We delete it after the notification. You can withdraw your consent at any time with effect for the future (Art. 7(3) GDPR); a short message to info@liquiflow.app is enough. On request we delete your email immediately.
Widget on other websites
Operators of other websites can embed our widget, which adds the AI label to images they have marked. The browsers of their visitors then load the file widget.js from www.ai-label.app. Cloudflare processes the technical data listed under “Hosting”, including the IP address.
The widget sets no cookies, stores nothing in the browser and makes no further requests: the icons are included in the file. It only reads the images of the page it runs on and sends nothing about them to us. The operator of the website that embeds it is responsible for doing so.
Contact by email
If you write to us, we process your details to answer your request (Art. 6(1)(b) GDPR where a contract is concerned, otherwise point (f)). We delete them when they are no longer needed for this purpose and no retention obligation applies.
Links to other websites
Many pages link to sources such as EUR-Lex, the European Commission or help pages of store systems. Your browser only connects to such a website once you follow the link. Their privacy policies apply there.
Retention
- Server logs at Cloudflare: according to Cloudflare's retention periods.
- Count of free images (salted IP hash): 31 days.
- Sign-in codes: 10 minutes. Sessions: 30 days or until you sign out.
- Account: until you delete it.
- Requests to be notified: until the notification or until you withdraw consent.
- Emails to us: as long as needed for your request and no retention obligation applies.
Your rights
You have the right of access, rectification, erasure, restriction of processing and data portability (Art. 15 to 20 GDPR). You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR).
Right to object: Where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR). An informal email is enough.
You can also lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
Use of the tools and the widget is also governed by the terms of use.
Last updated: 11 October 2026