Draft · not in force

Privacy Policy

Draft v0.1, written 2026-10-23. Section 1 describes this website exactly as it is running right now, and can be checked by opening the page source. Sections 2 onward describe a product that does not exist yet.

1. What this site does today

There is no backend. Nothing you type on this site is sent anywhere — there is nowhere for it to go. Every button that would send something is wired to a stub that fails on purpose, and the page tells you so in the red line at the top.

Concretely, and verifiably:

• The page loads no script, stylesheet, font, pixel or request from any domain other than this one.
• There are no cookies. There is no analytics. There is no advertising or third-party tracker.
• One thing is stored on your device, in your browser's local storage under the key avatar.local.v1: the version of these documents you accepted, and the timestamp. That is all. It exists so the notice does not appear every time you reload.
• Text you type into the create forms stays in memory. It is not written to storage, and it disappears when you close the tab.

You can delete what is stored at any time from the Account page, or by clearing site data in your browser.

2. What will be collected once generation exists

Not active. This section describes an intended design, and it is here so that the choice can be reviewed before anything is built — not after.

• Your uploads. Images and text you submit to a model. These must leave your device, because that is the entire product.
• Results. What comes back, kept so you can return to it.
• Job records. Which model ran a job, when, how long it took, what it cost.
• A consent record per upload. Which account uploaded it, which version of these documents was accepted at that moment, and when. This is the reason this page exists — a claim about someone's face or voice can only be answered if the record was kept from the first day. It cannot be reconstructed later.
• Account and payment. An email address, and whatever the payment processor hands us. Card numbers stay with the processor.

3. Who else sees it

The model providers. Your prompt and any image you attach are sent to a third party operating the model you pick, and their own terms and retention apply there. We do not control how long they keep an input, and for some providers we have not established that they publish it.

We do not sell personal data, and we do not advertise.

4. Retention

The create page says Nothing here is stored forever, and that is the rule rather than the marketing: uploads and results get a fixed retention period, deletion from the Account page removes the underlying files, and the consent record is the one thing kept longer, because removing it would destroy the only answer available to a legitimate complaint.

The retention period is not set. It is a decision, not a technical constraint, and it has to be made together with the entity question in Terms §8.

5. Where data lives, and who it is transferred to

Unresolved, and it is not a detail. The two largest model providers exclude mainland China from their supported-region lists, which means the answer to "where does this run, and under whose law" is bound up with "who are we". See Terms §8.

6. Children

No age floor is set yet. Until one is, this site should not be presented as available to anyone, which is a further reason the notice is marked as a draft.

7. Your rights, and how to reach us

Where the law gives you access, correction, deletion, portability or objection rights, they apply to whatever is actually stored — today, that is only the local record described in section 1, and clearing it is in your own hands.

There is no contact address. None exists for this product yet, so there is currently no way to ask us anything. That is a blocking gap, not a formatting one: a privacy notice nobody can write to is not a compliant one. It is listed in Terms §8 and in the rights holder notice.

← Back to Avatar Studio