[{"data":1,"prerenderedAt":122},["ShallowReactive",2],{"billing-status":3,"legal-privacy":10},{"enabled":4,"reason":5,"diagnostics":6},false,"not_configured",{"billingEnabledFlag":7,"hasApiKey":4,"hasWebhookKey":4,"environment":8,"missingProducts":9,"operatorProfileReady":7,"configured":4},true,"test_mode",[],{"id":11,"title":12,"body":13,"description":114,"effectiveDate":115,"extension":116,"meta":117,"navigation":7,"path":118,"seo":119,"stem":120,"__hash__":121},"legal\u002Flegal\u002Fprivacy.md","Privacy Policy",{"type":14,"value":15,"toc":102},"minimark",[16,21,25,28,32,35,38,42,45,49,71,75,78,81,85,88,92,95,99],[17,18,20],"h2",{"id":19},"who-controls-your-data","Who controls your data",[22,23,24],"p",{},"The legal operator below controls the personal data processed for this website, except where a provider acts under its own terms for services such as payment or Google identity.",[22,26,27],{},"::legal-operator-privacy::",[17,29,31],{"id":30},"data-we-process","Data we process",[22,33,34],{},"We process Google account identifiers, name, email and avatar; session and essential-cookie data; hashed IP, browser and device evidence; prompts and form selections; uploaded reference or body images while a request is running; generated images and tattoo ideas; content submitted for automated safety screening; credit, subscription and transaction records; support communications; and security logs.",[22,36,37],{},"We do not request a date of birth and do not intentionally collect images of minors. Do not enter sensitive personal information into prompts or uploads.",[17,39,41],{"id":40},"why-we-process-it","Why we process it",[22,43,44],{},"We use data to authenticate users, deliver and secure the service, enforce daily guest limits and acceptable use, provide credits and subscriptions, prevent fraud, support customers, comply with law and establish or defend legal claims. Depending on your location, these purposes rely on performing our contract, consent, legitimate interests and legal obligations.",[17,46,48],{"id":47},"providers-and-international-processing","Providers and international processing",[50,51,52,56,59,62,65,68],"ul",{},[53,54,55],"li",{},"Google provides identity tokens. We store the stable Google subject, not the ID token.",[53,57,58],{},"Cloudflare hosts the application and D1 database.",[53,60,61],{},"KIE receives prompts and reference images for image generation and applies its own NSFW safety checks. Its published documentation states temporary uploads may remain up to 3 days, generated media for 14 days and task logs for 2 months.",[53,63,64],{},"WaveSpeed receives prompts, Tattoo Idea profile fields and generated image prompts for text moderation, and reference-image URLs plus generated-image URLs for image moderation, when our content-moderation feature is enabled. This screening helps enforce our Acceptable Use Policy before or after AI generation. WaveSpeed processes this content on its infrastructure under its own terms and privacy policy; we do not control its retention periods.",[53,66,67],{},"DeepSeek receives the profile fields entered in the Tattoo Idea feature. DeepSeek's published terms require downstream disclosure and its privacy materials describe processing in the People's Republic of China. Do not enter confidential or sensitive information.",[53,69,70],{},"Dodo Payments receives checkout, customer, billing and tax information as Merchant of Record. Card details are handled by Dodo and its payment partners, not stored in D1.",[17,72,74],{"id":73},"retention","Retention",[22,76,77],{},"We do not persist uploaded source images in D1 or local object storage. KIE controls its temporary provider copies under the periods above. Generated-image URLs are cleared from D1 after 14 days; tattoo-idea result JSON after 30 days; guest daily-usage rows after 35 days; and verified Dodo webhook payloads after 30 days.",[22,79,80],{},"Billing, credit, policy-acceptance, dispute and fraud-prevention records may be retained for up to seven years where reasonably necessary or legally required.",[17,82,84],{"id":83},"cookies-and-google-sign-in","Cookies and Google sign-in",[22,86,87],{},"We use essential HttpOnly cookies for sessions, Google nonce protection, guest limits and policy acceptance. Google Identity Services is loaded only after you choose to continue and accept the current policies. We do not currently use advertising cookies. If non-essential analytics are added, we will introduce appropriate consent controls first.",[17,89,91],{"id":90},"your-choices-and-rights","Your choices and rights",[22,93,94],{},"You may request access, correction, deletion, restriction, objection or portability where applicable. This website does not provide an automated account-deletion control. To ask us to close your account or delete personal data, email the support address shown above from the Google address linked to your account. We handle those requests manually. Payment records and records needed for legal claims may be retained after profile data is removed. Contact the privacy email to exercise any right or complain.",[17,96,98],{"id":97},"security-and-changes","Security and changes",[22,100,101],{},"We use encrypted transport, HttpOnly sessions, signed webhooks, least-privilege provider credentials, hashed network identifiers and audited credit records. No system is perfectly secure. Material policy changes are versioned and require renewed acceptance before AI generation or checkout.",{"title":103,"searchDepth":104,"depth":104,"links":105},"",2,[106,107,108,109,110,111,112,113],{"id":19,"depth":104,"text":20},{"id":30,"depth":104,"text":31},{"id":40,"depth":104,"text":41},{"id":47,"depth":104,"text":48},{"id":73,"depth":104,"text":74},{"id":83,"depth":104,"text":84},{"id":90,"depth":104,"text":91},{"id":97,"depth":104,"text":98},"How account, billing, prompt, upload and generation data is processed and retained.","2026-08-03","md",{},"\u002Flegal\u002Fprivacy",{"title":12,"description":114},"legal\u002Fprivacy","8XOa8cktChLUgNYGJ3sNtgUhkO8eCx3cBbuDS3AJaYY",1787553398220]