Effective September 4, 2026
Privacy Policy
Your images are not published and are available only through your account. Infrastructure and model providers may still process them as described below.
1. Data we collect
Account data includes your email, password verifier, sessions, and policy acceptance. Creation data includes template ID, credit cost, job status, source photo, result, and minimal technical metadata. Waffo Pancake hosts payment processing. We retain order ID, pack, amount, currency, and refund status, but not full card details. Security records contain limited timestamps, error categories, and hashed rate-limit identifiers.
2. How we use data
We use data to authenticate accounts, deliver image jobs, maintain the credit ledger, process payments and refunds, prevent abuse, answer support, and meet legal obligations. We do not place customer images in a public gallery. We do not send images, email, job IDs, or free-form text to Firebase Analytics.
3. Processors and international handling
Cloudflare provides the website, D1 database, private R2 storage, and compute. OpenRouter routes image-model requests, and OpenAI processes generation. Waffo Pancake hosts checkout and payments. A configured email provider delivers verification and reset messages. After consent, Firebase Analytics processes limited product events. Processing can occur outside your country.
4. Retention and deletion
We delete source and intermediate images from active storage within 24 hours after a job reaches a final state. Results are stored for up to 30 days unless you delete them sooner. Sessions last up to 30 days and expire after 7 idle days. Payment and fraud-prevention records are retained as required by applicable law. Providers can have their own security and abuse-monitoring periods, so our time limits apply only to storage controlled by Octopus Camera.
5. Your choices and rights
You can decline optional analytics, access and delete images, delete your account, and request access, correction, deletion, or restriction where applicable law provides it. Account deletion removes images and personal identifiers or turns them into a non-identifying tombstone. Required payment records can remain.
6. Security and minors
Image buckets are private and result access requires a valid account session. Data travels over HTTPS. Octopus Camera is for people 18 and older and does not accept photos of minors.
7. Contact
Send privacy requests to roadhogwhatever@gmail.com. We may need to verify account ownership.