Privacy Policy

Your photo choices at a glance

Selecting or previewing a photo keeps it on your device. Uploading starts only when you select Generate video. You can change or remove a selected photo before starting. Removing a local preview does not delete a copy that was uploaded during an earlier attempt.

We use uploaded photos to create your requested clip and to address related service or deletion requests. Uploading does not add your photos or result to the public example gallery on this website. Public image links are used for video processing; anyone with such a link can view the image.

Information used by the service

The service creates an anonymous session with a generated internal identifier to associate uploads and video tasks with your browser. Registration, a name, an email address and a password are not required. Session records can include your IP address and browser information.

When you generate a video, the service processes the photos you select, your editable story text, the prepared generation instructions, job status and a link to the resulting video. Support emails contain the information you choose to send us.

Why we use this information

Visitor sessions protect access to uploads and video tasks. Internal credit records track generation usage and failure recovery. Uploaded photos and generation instructions are needed to create your requested video. Technical logs help diagnose errors and protect the service from misuse.

We use information sent to the support address to respond to your request. Avoid including passwords, API keys or unnecessary personal information in your message.

Storage and video processing

Cloudflare provides the application hosting, D1 visitor and task database, and R2 photo storage. AutoDL receives the reference-image URLs and generation instructions to run the video workflow. These providers process data on their own infrastructure and may process it outside your country.

Uploaded reference photos use HTTPS storage URLs so the video provider can retrieve them. These are public links, not private or password-protected photo links. Anyone who has a link can access that image. Choose photos you have permission to use and are comfortable sharing through this processing method. A local preview alone does not upload a photo.

Retention and deletion requests

Uploaded photos are automatically deleted from our R2 storage by our cleanup process. Visitor, task and internal credit records are managed separately from uploaded photo files.

You can request deletion of copies in our storage by emailing zw83716@gmail.com. Include the approximate generation date and time and any task reference or image URL you retained, so we can identify the relevant uploads. You do not need to attach the photos again. We may ask for information to verify that the request concerns your uploads.

After identifying and verifying the relevant uploads, we can remove the copies held in our R2 storage. Removing those copies does not recall anything previously downloaded or delete copies retained by the video provider. Provider retention and deletion are subject to that provider’s own policies. Generated-video links can expire, so save any result you want to keep while it is available.

Cookies and analytics

The service uses a signed, HttpOnly visitor cookie for session continuity and misuse prevention. This cookie can last up to one year. We also use short-lived, keyed hashes of Cloudflare-provided IP addresses to limit request bursts; the trial rate counters do not store raw IP addresses.

The authentication system uses session cookies, and the interface may store your theme preference in the browser. The current tab also keeps your latest video task ID for up to 24 hours; photos are not stored in this browser record.

We use PostHog for basic visit and referral-source statistics, including visits from AI assistants. A page-load event includes the page URL, referring website, campaign tags, and browser and device information. PostHog uses anonymous identifiers in browser storage to estimate visitor counts. Its US-hosted service processes analytics requests, including the network information needed to receive them.

We do not send uploaded photos, filenames, story text, generated media links, or your internal visitor-session identifier to PostHog. Session recordings and automatic click tracking are disabled. We remove unrelated query parameters and URL fragments from page URLs and keep only the origin of referring websites.