Privacy Policy

Last updated: October 13, 2026

This policy explains what we collect when you use airumpelstiltskin.fun(“the Service”), why we collect it, how long we keep it, and the choices you have. The Service is operated by the site owner (“we”, “us”).

1. Data we collect

• Account data: your Google account identifier and, if available, the name, email address, and avatar you choose to share at sign-in. Your Google password is never visible to us.
• Uploads: the photos you submit for generation, together with technical properties (file size, dimensions, type).
• Generated videos: videos produced from your uploads.
• Order data: purchase records, credit grants, and payment provider references (we do not store card numbers).
• Operations data: service events (sign-ins, jobs, downloads), audit records, and security metadata such as truncated/hashed IP and device information used to detect abuse.

2. Why we process it

• To create and secure your account and sessions.
• To perform the video generation you request.
• To meter credits, fulfill purchases, and handle refunds (legitimate interests / contract performance).
• To keep the Service safe, prevent abuse and fraud, and comply with legal obligations.

3. Third parties

• Google — sign-in (Google Sign-In with OpenID Connect). Google receives your sign-in activity; see Google’s privacy policy.
• Cloudflare — hosting, storage, and delivery (D1 database, R2 storage, queues).
• Waffo Pancake — payment processing. Card data is handled by their checkout; we only receive order references.
• Our video generation provider — receives the photos you upload, transmitted securely, solely to render your video.

Processing occurs on infrastructure in the United States and other regions where our providers operate. Do not upload images you cannot lawfully transfer to these providers.

4. Retention

• Uploaded original photos: deleted within a short window after the job completes (default 72 hours).
• Generated videos: 30 days by default, sooner if you delete them.
• Account and ledger/order records: kept while your account is active; minimal transaction records may be retained longer where required for tax/accounting obligations.
• Sessions and security logs: up to 12 months, then deleted or anonymized.

5. Your rights

• Export: download a copy of your account data from your dashboard settings.
• Deletion: request deletion of your account, uploads, and videos from your dashboard settings; we remove content and personal fields, retaining only the minimum records the law requires.
• Access/rectification: contact us (below) to review or correct your data.

Depending on where you live, you may have additional rights (e.g., under GDPR or CCPA). We do not sell personal information.

6. Cookies

We use a single strictly-necessary session cookie (HttpOnly, Secure) to keep you signed in. We do not use advertising cookies. Analytics, when enabled, records page-level events without your photos or payment data.

7. Security & children

Media is stored in private storage with per-user authorization; downloads are signed and short-lived. The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect their data.

8. Contact

Privacy questions and requests: support@airumpelstiltskin.fun.