Privacy policy

Account information

Google and Firebase Authentication process information required for sign-in, such as account identifiers, email, name, profile picture, and sign-in security information. Our server verifies your sign-in token and uses your verified Google account identifier to enforce the one-time allowance. Our allowance database does not store your name, email, or profile picture.

Photos and generated images

Your browser compresses selected photos. The studio does not send them to the image model until you choose to generate. Generation sends the compressed photo and style settings through our server to Volcengine Ark Seedream. Photos may contain people or other personal information; submit them only with appropriate permission.

The studio does not store originals or results in its database, an image library, or object storage. Images stay in the current page and cannot be recovered from this site after leaving or refreshing it. The provider’s handling and retention on its own systems are governed by its terms; we do not promise immediate deletion by the provider.

Allowance records and retention

The database stores a Google account identifier, request ID, a digest of the photo and settings, request status, UTC day, timestamps, provider request ID when available, and a stable error code. These records enforce allowances, prevent duplicate calls, and help investigate failures. A digest identifies matching requests and cannot restore a photo.

These records currently have no automatic expiry. Firebase retains the account record until the operator deletes the associated user. Authentication security logs follow the provider’s own retention policies. Allowance records are reviewed in response to your request under applicable requirements. Deleting a website account does not automatically reset its one-time allowance; account deletion is not a way to obtain new creations.

Browser storage and logs

Your browser stores your language preference, and Firebase stores session information needed to keep you signed in. You can sign out and clear site data. We currently install no advertising trackers or analytics tools.

Our generation diagnostics record request IDs, provider request IDs, and error codes, without deliberately logging photos, secrets, or sign-in tokens. Hosting and authentication services may also process IP addresses, device information, and request metadata for delivery, security, and diagnostics.

Providers and international processing

The studio uses Google/Firebase for authentication, Sites and Cloudflare infrastructure for hosting and its allowance database, and Volcengine Ark for image generation. The default image endpoint is in the Beijing region. Information may be processed outside your country of residence. We do not sell your photos or account information.

Your requests

Use the Contact page to request access, correction, or deletion, or ask about processing and retention. We may verify the account to protect you from unauthorized requests. Some security or allowance records may need to be retained; the operator will explain the outcome of your specific request.

Service provider information

• Google / Firebase
• Cloudflare
• Volcengine privacy policy
• Volcengine model service terms