Last updated: 2026-10-22
Operator details are being completed. Until then, contact us through the dashboard.
The controller of your personal data is —. Contact for privacy matters: —.
Account data — email address, optional name, a password hash and your language — to provide the account and the service (Art. 6(1)(b) GDPR).
API keys are stored only as hashes. We keep usage records (number of renders, their time and status) to count quotas and bill you (Art. 6(1)(b)).
Template content and field values you send, and the images produced, to render and serve them (Art. 6(1)(b)). Do not put personal data in them unless you need to.
Technical logs, including IP addresses, for security and abuse prevention (Art. 6(1)(f) — our legitimate interest in a secure service).
Billing data is collected and processed by Stripe; we receive only a customer identifier and subscription status (Art. 6(1)(b) and (c)).
Images and their history: 30 days on the Free plan, 365 days on paid plans. Account data: for as long as the account exists. When you delete the account in the dashboard (Account → Delete account), the account, its keys, templates, usage records and images are deleted immediately and any subscription is cancelled. Invoices are kept by Stripe as long as tax and accounting law requires, and affiliate commission records stay with the account reference removed. Logs: up to 30 days.
Besides the cookies needed for login sessions and protection against cross-site request forgery, we set only the first-party cookies described below. No advertising cookies and no third-party analytics.
We set one first-party analytics cookie, "vid": a random identifier, valid for 13 months from your first visit and not extended by later visits. With it we count our own product statistics on our server — which pages are visited, where visitors came from (the referring site or a utm_source tag), the device type (mobile, tablet or desktop) and steps such as viewing pricing, signing up and the first render. We store no IP address and no browser string with these events, do not share them, and do not use the cookie to track you across other websites or to build advertising profiles. Legal basis: Art. 6(1)(f) — our legitimate interest in understanding and improving the service. You can delete or block the cookie in your browser at any time; the site works the same without it. Events are deleted after 6 months, and events linked to an account are deleted together with the account.
If you arrive through a partner's referral link, we also set a first-party "ref" cookie holding the partner's code for 60 days, so we can credit them if you sign up (Art. 6(1)(f) — our legitimate interest in running the affiliate program). We count clicks only as numbers, without storing your IP address.
You have the right to access, rectify and erase your data, to restrict or object to processing, and to data portability. You can delete your account yourself in the dashboard, under Account → Delete account; for everything else write to —. You can also lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (UODO).
We use these providers, each under a data processing agreement:
Where a provider is outside the European Economic Area, transfers rely on the EU–US Data Privacy Framework or standard contractual clauses.