Questions
Is my image uploaded anywhere?
No. Every byte is parsed by JavaScript inside your own browser tab. There is no backend, no storage, no logging. Want to verify that yourself? Turn off your internet and use the tool anyway. It still works. That is the easiest proof there is.
Can you detect SynthID from Google Gemini?
Not here. SynthID hides a statistical watermark in the pixels themselves, and reading it needs Google’s own model. If a Gemini image still carries its C2PA manifest or IPTC tag, we will find that. If those were stripped, the watermark may still be sitting in the pixels, invisible to us. What changed recently is that Google put the check into the Gemini app, so you can run it yourself: give it the picture and ask whether it was made with Google AI. We tried that on a screenshot. It worked, but only after cropping tight to the image; with a frame around it, Gemini found nothing.
I checked a photo and got Inconclusive. Is it broken?
No. That is the honest answer for that file. Instagram, Facebook, WhatsApp, Telegram, Discord and X all re-encode what you upload and throw away the metadata. Screenshots lose everything too. When that happens we fall back to reading the file's structure, which catches a lot of generated images, but not all of them. Try the original file rather than a version saved off social media and you will usually get much further.
Can the markers be faked?
In both directions, and we say so on every result. EXIF is plain text that can be copied from a genuine camera file onto a generated one, which is why camera evidence is reported as supporting rather than conclusive. C2PA manifests are cryptographically signed, so forging one convincingly is far harder, but verifying the signing certificate needs the official verifier, which we link to on every report.
Which formats work?
JPEG, PNG, WebP, AVIF, HEIC/HEIF and TIFF. JPEG and PNG get the deepest treatment, including compressed zTXt and iTXt chunks and full quantization table analysis. AVIF and HEIC get container parsing plus a raw marker sweep.
What does it cost, and what is the catch?
Nothing, and there isn’t one. The site costs almost nothing to run, no file leaves your device, so there is no server doing work per check and nothing worth metering. There is no advertising on it today. If that ever changes, nothing will load until you allow it in the cookie settings.
Is this open source? Can I check what the code actually does?
Yes, and that is the point. The whole thing is on GitHub under AGPL-3.0. The engine ships to your browser unminified, so what runs is what you can read, but a repository makes it far easier to audit, and it means the claim that nothing is uploaded can be verified rather than believed. If you find something wrong, open an issue.