It doesn't store the original images, but it has learned how getty images watermark looks like and where it's located, because it has been repeated millions of

It doesn't store the original images, but it has learned how getty images watermark looks like and where it's located, because it has been repeated millions of times. So it sometimes can return that. This is why it's important to clean up the training dataset. To remove duplicates, images containing watermarks, images that are too similar to each other and so on.