Privacy Policy

Last updated: November 13, 2026

What we collect

Account: your email address, a hashed password (or your Google account identifier if you sign in with Google), and sign-in sessions.
Credits and payments: your credit balance and credit history, code redemptions, and payment orders. Card details go to Dodo Payments and are never stored by us.
Your content: prompts, generation settings, reference images you upload, and the images we generate for you.
Guests: if you generate without an account, we store the image, the prompt and a temporary guest session, plus a hashed form of your network address to enforce the free-image limits.
Security: hashed network addresses and counters used for rate limits, and the result of Cloudflare Turnstile bot checks.
Source: the first-touch cookie described below.
Usage analytics: pages viewed, the page language (English or Chinese), country, device type, where you came from, and actions such as starting or finishing a tool, downloading a result, or starting a checkout. We never send your prompts, uploaded files, generated images or network address to the analytics service, and we do not record sessions or keystrokes.

To sign you in, generate images, show your History and keep your credits correct.
To process payments, return credits for failed generations and answer purchase questions.
To prevent abuse, such as bots and repeated use of the free image.
To understand which pages bring people to the site and how the tools are used, so we can improve them.

We use these providers to run the service. Each receives only what it needs to do its job.

Cloudflare: hosting, database, image storage and security, including Turnstile bot checks.
Cloudflare Web Analytics: page-view statistics without cookies.
PostHog (United States): usage analytics described above. It runs without cookies or browser storage. Once you sign in, events are linked to your account ID, never to your email address.
APIMart, which provides access to OpenAI's GPT Image 2: your prompts and reference images are sent through APIMart to OpenAI's model to generate images, and are subject to their processing terms.
Resend: sends verification and password-reset emails.
Dodo Payments: checkout and receipts for credit purchases.
Google: sign-in, only if you choose Continue with Google.

Session cookie: keeps you signed in. It is needed for the site to work.
i2s_ft: stores the source that sent you to us, the first page you landed on and its language. It lasts 90 days and is linked to your account if you sign up.
Analytics sets no cookies and writes nothing to your browser storage.
Cloudflare Turnstile: checks that you are not a bot when you sign up, log in or generate.

Account data, credit records and payment records are kept while your account exists, and as long as we need them for accounting or the law.
Images, prompts and reference images of signed-in users are kept in your History until you delete them or your account.
Free images made without an account are deleted after 24 hours unless you sign up and keep them.

Delete any image from History. This removes the image and its generation record.
Email ruiyang0012@gmail.com to delete your account, or to ask for a copy of your data. We will remove your account and content, except records we must keep for billing or legal reasons.
Clear the i2s_ft cookie in your browser at any time.

Privacy questions: ruiyang0012@gmail.com.