Privacy Policy
What this covers
This policy explains what [LEGAL ENTITY] collects when you use this site, why, and what you can make us do about it. Photographs of people are sensitive personal data, and we treat them that way.
What we collect
- Account data — your email address, or the account identifier and email supplied by Telegram, Google or Discord if you sign in through one of them. A password hash if you set a password. We never store a password itself.
- Uploads — the photographs you send for generation.
- Results — the images and videos generated for you.
- Payment records — the amount, the pack, the Telegram charge identifier and the paying Telegram account. Telegram handles the payment itself; we never see a card number.
- Technical data — IP address, browser characteristics and timestamps, recorded with account creation and with free generations.
Why we collect it
- To run the service you asked for: generating, storing and delivering your files, and keeping your credit balance correct.
- To keep the service safe: detecting automated abuse, enforcing the one free generation per account, and investigating reports.
- To meet legal obligations, in particular around child safety and accounting.
Where the law requires a legal basis, ours is performance of our contract with you for the first, our legitimate interest in a service that is not overrun by abuse for the second, and legal obligation for the third.
What we do not do
- We do not sell your data.
- We do not use your uploads or your results to train models.
- We do not put your uploads, your results or your email into analytics, advertising or any third-party tool.
- We do not write uploaded images or their contents into application logs.
How long we keep it
- Uploads — deleted as soon as the generation finishes.
- Results — 30 days, then permanently deleted with their records.
- Account — until you delete it.
- Payment records — as long as accounting and tax law in [JURISDICTION] requires.
- Abuse records — as long as needed for the case, and where child safety is involved, as long as the law requires.
Who else touches it
Generation runs on infrastructure we rent. The provider hosts the machine; it does not receive your data for its own purposes. Telegram processes payments and, if you sign in with Telegram, your identity. Google and Discord do the same if you use those buttons. Each has its own privacy policy.
Your rights
You can ask us to show you the data we hold about you, correct it, delete it, or hand it over in a portable form. You can object to processing based on our legitimate interests. Deleting your account from your settings does most of this immediately.
If a photograph of you was uploaded here by somebody else, you do not need an account to act: use the content removal form. We answer within 72 hours.
For anything else, message @dkocokdfebot on Telegram, or use the content removal form, which reaches us the same way and does not need an account. If you are in the EU or the UK and are not satisfied with our answer, you may complain to your national data protection authority.
Security
Traffic is encrypted in transit. Passwords are stored only as hashes. Result files are served under unguessable identifiers and only to the account that owns them. Access to the servers is limited to the people who operate them.
Cookies
We set cookies for your session, your language choice and your age confirmation. That is all of them. There are no advertising or analytics cookies, so there is nothing here to consent to beyond using the site.
Changes
If this policy changes materially we will say so on the site before the change takes effect.