Last updated:
What we collect
The photo or photos you upload, the video we generate from them, your email address if you give it to us, and payment confirmation from Stripe. We never see or store your card details.
To prevent automated abuse and payment fraud, we use Vercel BotID browser verification, a signed visitor cookie, and short-lived attempt counters. Our database stores a hashed network identifier rather than your raw IP address. Stripe and Vercel process security signals under their privacy policies.
To understand which steps of the site work, we keep anonymous usage events (for example “photo uploaded” or “checkout started”) tied to a random ID stored in your browser. With them we keep only the traffic source category, the referring site’s domain, campaign (utm) tags and the landing page — no IP address, device fingerprint or full referring URL.
Optional Google Analytics
With your permission, we use Google Analytics to measure visits, page views and traffic sources. Google may receive browser and device information and process your IP address to provide analytics. Analytics cookies are used only after you choose “Allow analytics”. You can decline or withdraw permission at any time using “Analytics preferences”. Your choice is saved in your browser.
We send only public page categories and referring site domains, with a limited list of traffic source and medium tags. We exclude URL queries, fragments and private video IDs. We do not send email addresses, prompts, uploaded media, private links or tokens to Google Analytics. We do not enable advertising personalization or Google Signals. Google Privacy Policy.
How we use it
Photos are sent to our AI video provider only to generate your video. We do not sell your data, share it for advertising or use your photos to train models. Your email is used to deliver your video and product updates you asked for.
Retention
Uploaded photos and generated videos are deleted automatically after 30 days.
Local abuse counters and failed payment records expire within 24 hours; our scheduled cleanup removes expired records. The visitor cookie lasts 30 days.
Contact
To delete your data sooner, email support@raindanceai.org.