Privacy in the studio.

Your photo drafts stay on this device

Selecting photos makes them available to this browser. Save cast stores the photos, cast order, resolution and save time in this browser's IndexedDB. These drafts do not sync to another browser or device.

Delete a cast in My studio to remove its stored photos and settings. Clearing site data in your browser also removes local drafts. Keep your own copies of photos you need later.

Google sign-in

Google Identity Services verifies your Google account when you choose to sign in. The server verifies Google’s signed credential and uses your Google account identifier and display name to identify your studio. The application does not request access to Gmail, Google Drive or your contacts.

A signed, HTTP-only login cookie keeps you signed in for up to seven days. Sign out clears this browser’s login cookie; it does not delete drafts or payment records. The login button and One Tap prompt load Google’s identity service, which is governed by Google’s privacy policy. Orders use a hash of your account identifier rather than your display name.

When you create a video

When you select Create paid video with photo permission confirmed, the selected photos upload directly to private Cloudflare R2. The site server validates their contents and sends them with your settings to MiniMax for processing. Selecting photos or saving a draft alone does not submit them to MiniMax.

MiniMax returns a task and, on success, a video URL. A successful task check saves the original MP4 in private Cloudflare R2 before the studio displays the result. Task queries are available for seven days, so return to an unfinished order within that window. Provider processing and retention follow MiniMax's published policies; deleting a local draft does not delete a provider or R2 copy. Save your own copy of a completed video.

Sharing a finished video

Finished videos stay private until you confirm public sharing permission and create a share page. Anyone with that page link can watch the video without signing in. The page displays the finished video and an invitation to create another; it does not expose your account details or uploaded portraits separately.

You can turn sharing off from the video result. New page and playback requests then stop working. Previously issued playback links may remain valid for up to five minutes, and copies someone has already saved or recorded cannot be recalled. Turning sharing off keeps your own video available. Cloud videos remain stored until removed by the operator. Contact support to request deletion.

Payments and orders

Selecting Continue to payment uploads the cast directly to private Cloudflare R2 and sends photo references to the server for validation. The order database stores a fingerprint of the cast, an account identifier hash, video settings, payment references and task status; it does not store the uploaded photographs. Your cast is saved on this device before checkout.

Stripe hosts checkout and processes payment information. Card details are entered on Stripe and do not pass through this application. Deleting a local draft does not delete the payment record. Payment records are retained for order support, accounting and payment disputes. Data requests can be sent to support.

Google Analytics

The production website uses Google Analytics 4 to measure page visits and basic browser and device information. The Google tag may store analytics cookies and sends usage information to Google under its privacy policy. We do not attach your photos, saved cast contents or Google sign-in credentials to analytics events.

Hosting and access

The website uses Vercel hosting with Cloudflare providing domain DNS and private R2 photo storage. These providers may process access and request information under their own policies. Saved cast photographs remain browser-local until you explicitly submit them for payment validation or generation. Submitted photographs are stored in a private R2 bucket. No automatic cloud-photo deletion schedule is currently configured; expiring an upload reference does not delete the stored photo. Deleting a local draft does not delete its uploaded R2 copy. Contact support to request deletion of uploaded photographs.

Contact and data requests

bitio operates this service. For questions, payment support or deletion of uploaded photos and saved cloud videos, email persisan@gmail.com with your order reference. Do not send card details or passwords. Deleting local drafts alone does not delete cloud data.