Privacy Policy

This policy covers the website and the generation platform operated by the company named at the end of this page. Where this policy says "we", it means that company. Where it says "your content", it means the files you upload and the images and videos generated on your account.

We collect four kinds of information, and nothing that is not on this list is collected deliberately.

We do not sell personal data. We do not use your content to train our own models, and we do not license it to anyone else for that purpose.

• To run the service you asked for — generating, storing and delivering your content, and keeping your credit balance correct. Basis: performance of a contract.
• To take payment and keep the financial records the law requires us to keep. Basis: contract, and legal obligation.
• To keep the platform safe — detecting abuse, enforcing the content policy, and meeting reporting obligations where they apply. Basis: legitimate interests, and legal obligation.
• To stop the free credits given to new accounts being claimed over and over from one device, or many times over from one internet connection. Basis: legitimate interests — our interest in not funding the same person many times, weighed against a check that stores nothing on your device and produces a code identifying nobody.
• To fix things — diagnosing errors, measuring capacity, and understanding which parts of the product fail. Basis: legitimate interests.
• To tell you about the product, where you have asked us to. Basis: consent, withdrawable at any time.

Running a generation means sending your inputs to a model provider. We use a small number of processors, each under a written agreement, and each only for the purpose named.

• Model providers — receive the inputs for a generation you request, and return the output. They do not receive your account identity.
• Hosting and storage — hold your account record, your files and our logs.
• Payment processors — take payment and hold the card or wallet details. We never see or store a full card number.
• Email and messaging — deliver transactional messages such as verification and receipts.

Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another provider. You can also withdraw consent where consent is what we relied on.

You can close your account from your account settings without contacting us. Your profile is erased and your sign-in is permanently blocked, so the account cannot be used again. What you generated on it is removed from your account and retained on our systems for safety, moderation and fraud prevention; write to us if you want it erased as well. If a legal hold applies to your account, closure is refused with the reason shown rather than failing silently.

• Data is encrypted in transit, and at rest in our storage provider.
• Access to production data is limited to the people who need it, and every administrative action against an account is written to an append-only audit record.
• Your content is not readable by other users. Sharing is opt-in and produces a link you control.
• No security is absolute. If a breach affects you and the law requires us to tell you, we will.

Some tools work with images of people — a reference photo, a character sheet, a face to keep consistent between generations. Those images are processed to fulfil the generation you asked for, and for nothing else.

• We do not use images of faces to identify people, and we do not build biometric profiles or templates from them.
• Where a model provider requires a face image to be registered with it before generating, that registration is deleted as soon as the generation finishes — whether it succeeded or failed.
• We do not use your images to train models. See the terms for the full statement.
• You are responsible for having the consent of any real person whose likeness you upload — the content policy sets out what happens when that is not the case.

We set three cookies that are required for the product to work: a session cookie so you stay logged in, a preference cookie for your language, and a preference cookie for light or dark. None of them is used for advertising. The two below are not required for the product to work, and are described so you can see exactly what they do.

There is a fourth cookie, and only if you arrive on a link we have shared somewhere — a post, a profile, a card. It is called ref_src, it holds the name of that link, and its whole content is a label we chose, such as reddit-august: everyone who followed the same link carries the same value, and it is not an identifier for you. It lets us see which of the places we posted actually brought people, which is otherwise unknowable to us. It cannot be read by scripts or by anyone else’s site, it lasts seven days, and it is deleted when you create an account. We are not going to call it strictly necessary — it is there for our benefit rather than yours, and if you would rather not have it, remove the part of the address that begins ?ref= before you open the link.

We also measure how the site is used, with Google Analytics. It counts page views and records which pages are opened, from which country and on what kind of device. It sets a cookie of its own, named _ga, which holds a random number identifying your browser — not you, and not anything you have told us — so that two visits from the same browser can be recognised as one person rather than two. It is not used for advertising and is not shared with advertisers.

There is one place where we do look at the characteristics of the device you are using: when an account is created. Your browser calculates a single value from things it can observe about itself — the size and colour depth of your screen, your time zone and languages, how many processor cores it has, and how it draws a small test image — and sends us that value. This is browser fingerprinting, and we would rather name it than describe it as something milder.

We use it for one purpose only: to check whether the free credits we give to new accounts have already been claimed from the same device. We also count, against an irreversible code made from your internet address in the same way, how many times those credits have been claimed from one connection recently — not to identify you, but because one person opening many accounts uses one connection to do it. If they have, the account is still created and works normally — only the free credits are withheld, and we tell you so. Nothing is written to your device to do this: the value is calculated fresh each time and never stored on your machine. We do not keep the value your browser sends either. We convert it into an irreversible code using a secret key that never leaves our systems, and keep only that code, which cannot be used to identify you, to recognise you on other sites, or for advertising.

Because those codes are what stop one device or one connection claiming the free credits again and again, they outlive the account they were recorded against. When an account is deleted the link between the code and any person is severed, and what remains says only that some device once claimed the bonus. If you believe the free credits were withheld from you in error — a shared computer at home, in an office or in a library is the obvious case — contact us and we will apply them by hand.

We set no advertising cookies and share no analytics data with advertisers.

The service is not for anyone under 18. We do not knowingly hold data belonging to a minor, and an account we believe belongs to one is closed and its content removed.

When this policy changes materially we will say so in the product before the change takes effect. The date at the top of this page is always the date of the version you are reading.