Privacy

Blake

2026-10-28

Photos and videos

Photos you select are uploaded to a private Cloudflare R2 bucket after you sign in and continue to review your order. The model provider, fal.ai, receives temporary access to the selected reference photos and the fixed performance video needed to create your video. Empty optional seats do not upload a replacement photo. Intermediate video segments, completed videos and covers are stored privately in R2. Download links expire automatically. An already-issued link can work until it expires or the object is removed.

Source photos expire after 24 hours; videos and their covers after 30 days. Expired files are removed by scheduled cleanup; inputs still needed by an active job are kept until processing ends. You can request deletion from support using your order reference.

Deletion revokes access in this service and removes its stored copies. A model provider may have its own processing and retention practices. Files already downloaded by you or shared outside this service cannot be recalled.

Accounts and payments

Supabase Auth manages Google One Tap sign-in. The selected payment provider handles card and payment details. This site stores user IDs, orders, processing status and support requests; it does not store card numbers. Order and support records may remain after media deletion so payment and delivery issues can be resolved.

Browser drafts

A temporary photo draft may be kept in this browser so you can return from sign-in or checkout. Signing out clears that local draft. Stripe handles payment details; this service does not save card numbers.

Optional analytics

When analytics is enabled for this installation and the applicable consent setting allows it, this service records pseudonymous visits and the steps from photo selection through login, checkout, verified payment, generation and download-link requests. It may send limited events to the configured Google Analytics 4 and Plausible properties and load Microsoft Clarity for consented browser behavior. Upload, account and payment surfaces are masked for recordings. Photo content, filenames, card details and signed media links are not analytics event properties. Short marketing UTM labels and referral origins may be retained and attached to orders. Plausible delivery can temporarily use encrypted visitor IP/User-Agent data; event, visitor and transport retention are configurable. Declining or withdrawing analytics consent stops new optional collection and cancels pending deliveries; previously delivered vendor data cannot be recalled automatically. Contact support for data requests or details about this installation’s enabled services and retention.

Your requests

For media deletion, account or order-data requests, contact support with your order reference. Media also follow the scheduled expiry described above. Do not email sensitive photos or payment card details.

Contact: support@tiny-desk-ai.site