Privacy Notice
Version: 2026-10-27-private-v1 · 27 October 2026
Who is responsible
Benjamin Hughes is the controller for Toilet Bench. Contact: benjamin.d.hughes@pm.me.
What we collect
- Your submitted photo, the point you mark within the image, image dimensions and format, a random submission reference, and submission time.
- Technical information needed to deliver and protect the service. Your IP address is processed to verify submissions and derive a salted hash for submission limits. That hash remains potentially personal data; it is not a guarantee of anonymity. Infrastructure providers may also hold request logs.
- Information you provide when you email us.
We do not ask for your name, email address or an account to submit. The browser resizes your photo and rewrites it as JPEG. The server rejects EXIF metadata, including embedded GPS information. Visible details in the photo may still identify people or places. The marked point is a location within the image, not a GPS coordinate.
Why we use it and the legal basis
Photos and marked points are used to build and run a private AI evaluation benchmark under the contribution licence. We ask for photos without personal information; GDPR does not apply to genuinely non-personal data.
Who receives information
Submissions are held privately for the operator and authorised service providers. Supabase provides the upload endpoint, database and private photo storage. This is hosted in Europe. Cloudflare Turnstile processes your IP address and browser/device signals for bot detection; see its Turnstile Privacy Addendum. The current website also loads fonts from Google Fonts, which causes your browser to contact Google, and loads the Turnstile script when you visit.
Your choices and rights
Contributing is optional. Without accepting the contribution licence, you can browse but cannot submit. You may request removal using the contact address above. Save your submission reference to help us locate the photo. If another person submitted a photo containing your information, you can also contact us without a submission reference.
You can complain to Datatilsynet, the Danish data protection authority, or your local supervisory authority.