What happens
to your image.

1. Images you choose

Your browser checks the file, scales its longest edge to no more than 1536 pixels, re-encodes it, and removes embedded EXIF metadata before upload. The compressed image—not the untouched original—is sent to our server and then to Replicate for model processing.

We do not store the source image or generated pixels in the account database, automatically publish them, or add them to a public gallery. We ask Replicate to delete the temporary uploaded input after a prediction reaches a final state. Provider prediction inputs, outputs, and logs normally expire after about one hour. Download results you want to keep before the displayed expiry time.

2. Accounts, credits, and subscriptions

Supabase processes account email, encrypted authentication data, display name, avatar choice, credit balances, credit ledger entries, and the minimum subscription state needed to operate your account. Authentication sessions use secure, HttpOnly first-party cookies. We do not store your password.

PayPal processes checkout and payment information under its own privacy terms. We store only the PayPal subscription identifier, plan, status, period dates, and signed Webhook event identifiers needed to prevent duplicate entitlement updates. Card or bank details do not pass through our server.

3. Security and usage limits

Cloudflare Turnstile processes a verification token to reduce automated abuse. Our server reads the network address supplied by the hosting platform, transforms it with a keyed one-way hash, and sends only the hash to Upstash Redis for short-lived rate-limit counters. We do not intentionally store the raw address in the quota database.

4. Analytics

Vercel Web Analytics records page and product events such as selecting an upload, starting or completing a generation, downloading, sharing, and encountering a quota limit. These events must not include the image, filename, optional direction, result URL, payment payload, or raw IP address.

Your language choice is stored in your browser and in a small first-party preference cookie so it remains selected as you move between pages.

5. Service providers

• Vercel hosts the website, server functions, and web analytics.
• Cloudflare provides DNS and Turnstile verification.
• Upstash stores temporary quota counters keyed by a hashed identifier.
• Replicate runs the image-editing model and temporarily handles inputs and outputs.
• Supabase provides authentication and the account database.
• PayPal processes subscriptions and sends signed billing events.

6. Your choices

You may use public informational pages without an account. Account holders can change their display name and avatar, cancel subscription renewal, and request account-data help by email. Do not upload confidential, unlawful, or highly sensitive material.

7. Contact

For privacy or account deletion questions, email support@imagetoclaymation.com. Please do not attach the original image unless we specifically ask for a non-sensitive test file.