MasklyThe safest copy
is the one we never keep.
A tool that handles Aadhaar cards has to be stricter than the problem it solves. Here is exactly what happens to your image, and what doesn't.
Never stored
- Your uploaded image, and the masked result: held in memory only, never on disk or in a database.
- The Aadhaar number, not even the last four digits.
- Your file name. The masking engine is given a request number instead.
- Anything the engine reads from the card.
Kept, briefly, to stop misuse
- The time of each request, and the source IP address.
- The file's type and size, and a fingerprint (a one-way hash) of it.
- Whether an Aadhaar number or QR code was found, and whether masking succeeded.
- Your browser's name and version.
Built to be
hard to misuse.
One-time results
A masked image is released once, only with the private token of the request that made it, and only to the same client. Then it's erased. Uncollected results are erased automatically after the time you set.
Keys tied to the client
A key works only for the client that requested it, under the access rules you set. Only a one-way hash of each key is stored.
Real file checks
A file's content decides its type. Renamed files, empty or damaged images, and huge images are refused before they reach the engine.
Abuse protection
Usage rules per key and per client, a bounded queue, and an automatic pause for clients that keep sending invalid requests.
Separated data
The service logs to its own database area, with an account that can't read anything else. No table can hold an image.
Strict browser rules
Only this site's own pages may call the service from a browser. Responses are never cached and can't be framed by other sites.
Your rules,
your deployment.
| Files | JPG, PNG, PDF and TIFF, with file size and resolution caps you choose |
| Access | Key expiry, images per key and requests per client in a time window |
| Results | Released once, then erased; how long uncollected results are kept |
| Volume | Sized per customer: performance and sizing |
What this does,
and what it doesn't.
Maskly reduces how much personal data a copy of an Aadhaar card carries. It doesn't decide for you whether you may collect or keep that copy; that's a question for your compliance or legal team.
Automated masking can miss a card in a very blurry, dark or heavily cropped photo. For important documents, look at the result before relying on it.
The online service must run behind HTTPS before it is opened to the public. Self-hosted setups keep every image inside your own network.
Questions about
your data?
We'll answer them, including for your security review.