Privacy Policy

The short version

• To make a video, we need your account email, the two portraits you pick, and standard technical data (IP address, browser type). That is the core of it.
• Your portraits go to our AI providers — Kie.ai, and fal.ai when a task is routed there — to be transformed into the video. They keep copies under their own rules; their current guidance says generated media stays available for about 14 days.
• Checkout is handled by the payment provider. Full card numbers never reach us.
• Media links (like your video's download URL) work for anyone who has the link. Treat them as unlisted, not secret — and download what you want to keep.
• There is no self-service delete button yet. Email support@rumpelstiltskin-ai.org and we will close your account and remove your photos and records.

This policy applies when you browse the site, use the Studio, create an account, buy credits, or contact us. "We" and "our" mean the operator of Rumpelstiltskin AI. You can email us about any of it without an account. Rumpelstiltskin AI is an independent, fan-made service that uses third-party providers to generate media; those providers and any site you visit from here have their own privacy notices.

1. What we collect

What we process depends on what you use:

• Account and sign-in: your name, email, and profile image if you provide one, plus account identifiers, verification status, and session records. Password sign-in stores only a password hash. Third-party sign-in (when offered) shares the name, email, and profile image that provider gives us, plus the tokens needed to keep you signed in.
• Portraits and generation records: the two photos you submit (or their image URLs), your model and resolution choices, task and provider identifiers, timestamps, status and error details, generated video links, and the credits used or returned. Photos can contain personal information about other people, not just you — that is why the permission rules in our Terms of Service matter.
• Payments and credits: order identifiers, pack details, amounts and currencies, transaction status, payment-provider identifiers, and your credit grants, consumption, and returns.
• Support conversations: the messages, attachments, and contact details you choose to send us.
• Technical and usage data: IP addresses, browser and device information, request metadata, and diagnostics used to deliver and protect the service. Account creation also records the signup IP and, when available, where you came from.

You can browse the site and read our guides without an account, photos, or credits. Ordinary page requests still involve the technical data above, and any third-party scripts we enable run on those pages too.

2. Where your portraits actually go

This is the part most worth reading, so it gets its own section.

When you pick a photo in the Studio, your browser prepares a resized copy before anything is uploaded. When you start a generation, that copy and your settings go to our service, and we send the images (or their hosted URLs), the fixed generation instructions, and the reference performance video to the AI provider handling the task — Kie.ai by default, or fal.ai when the task is routed there. Kie's file service hosts the inline images so its generation system can reach them.

The provider's models use the visual features in your portraits to build the scene. We keep the reference image information and the provider's result information in your task records, so your history page works and we can reconcile status and credit charges.

Three things follow from that flow:

• Providers keep their own copies under their own terms. We do not promise they retain nothing or never use submitted material for model improvement. See Kie.ai's privacy notice and fal.ai's privacy notice.
• Deleting on your end is not deleting. Swapping a photo, clearing an upload slot, or closing the page does not remove a task that was already submitted, nor provider copies.
• Upload deliberately. Only send images you have permission to process — including permission from the people depicted (or a child's parent or guardian). Avoid identity documents, confidential records, and intimate photos.

3. Why we use your information

To create and authenticate your account; to submit generation tasks and deliver the videos; to show your task history; to process purchases and maintain your credit balance; to return credits for confirmed failures; to answer support and privacy requests; to diagnose problems; to prevent unauthorized access, abuse, and payment fraud; and to meet legal obligations. Where analytics or advertising are enabled, they help us understand site usage and measure ads.

Where data-protection law requires a legal basis: we rely on performance of our contract with you for the account, generation, and purchase functions; on legitimate interests for proportionate security, troubleshooting, and support; on legal obligations for required records; and on consent where an activity requires it. You can ask us about these bases or withdraw consent where processing relies on it — withdrawal does not undo earlier lawful processing.

4. Who else is involved

• AI and file providers: Kie.ai and fal.ai receive the generation inputs, host media, and return outputs. Their downstream infrastructure and model providers may be involved in fulfilling a request.
• Hosting and storage: Cloudflare hosts the site. Uploaded files and site assets may use configured Cloudflare R2 storage; generated videos may live on provider-hosted storage.
• Sign-in, payments, and email: if you use third-party sign-in, that provider exchanges what login requires. The checkout provider shown to you (such as Stripe, Creem, or PayPal, when offered) receives your purchase and customer details — payment credentials stay with them. Email services (such as Resend) process the address and message needed for verification and password resets.
• Optional analytics, ads, and chat: Google Analytics, Plausible, Google AdSense, Crisp, or Tawk may receive the information described in the cookies section when enabled.
• Administrators: relevant account, task, transaction, or support information may be accessed to run the service, investigate problems, and resolve your requests.

We may also disclose information when the law requires it or when reasonably necessary to protect rights and the service's security. If the service is ever transferred as a business asset, your information may move with it under applicable privacy obligations.

5. Media links are not private storage

Your history and download endpoints require your account and check task ownership — but the underlying media URLs do not. A provider-hosted or publicly hosted photo or video URL can be accessible to anyone who obtains the link. Treat those links as unlisted, not confidential.

Once you publish or send a video, the recipient or platform can copy and process it under their own rules. A deletion request to us cannot reach copies others downloaded or posts on another platform — contact those recipients separately where it matters.

6. Cookies and optional services

Authentication cookies keep you signed in; browser storage remembers interface preferences like sidebar state; a referral-source cookie, when present, records where your account creation came from. Blocking the required cookies breaks sign-in.

Optional integrations run only when enabled for the site:

• Google Analytics processes page and interaction events with device and network information, using cookies or similar identifiers. See Google's privacy information and the Analytics opt-out tool.
• Plausible measures visits and page usage; see Plausible's data policy.
• Google AdSense can use cookies and identifiers for ad delivery, measurement, and — where enabled and permitted — personalization. See Google's advertising controls.
• Crisp or Tawk chat (the widget, separate from our account support tickets) processes visitor and device information and chat messages. See Crisp's privacy notice and Tawk's privacy notice.

Browser settings can restrict cookies and storage, and the provider controls above offer opt-outs — effects vary and may not stop every request to a provider. Where the law requires consent or an opt-out mechanism for these integrations, those requirements apply; we do not claim a site-wide cookie-preference control exists today.

7. How long we keep things — and how to delete them

There is no fixed automatic deletion schedule today. We keep records as long as their purpose needs: running your account, preserving your generation history, handling support and disputes, security investigations, and any accounting or legal requirements. Credits never expiring does not mean media stays online forever — see the next paragraph.

Providers delete on their own schedules, not ours. Kie.ai's current guidance describes roughly 14 days of availability for generated media and about two months of log retention. Those are Kie's periods, may change, and do not cover our task records, your uploaded portraits, or another provider's files. Download videos promptly instead of treating a provider link as a backup.

To close your account or delete photos, videos, or associated records, email support@rumpelstiltskin-ai.org from your account address with any task IDs that matter. There is no self-service deletion yet. We will action the request and tell you honestly what must remain for a legal obligation, an unresolved transaction, a dispute, or security — and what cannot be reached, such as provider copies, backups, and other people's downloads.

8. Your privacy rights

You can update your profile fields, choose which photos to submit, and avoid third-party sign-in. Depending on where you live, you may also have rights to access a copy of your personal information, correct it, delete it, restrict or object to processing, receive it in a portable form, or withdraw consent — plus rights regarding sale, sharing, or targeted advertising where those apply.

Email support@rumpelstiltskin-ai.org or open a support ticket to make a request. We may ask for what we reasonably need to verify who you are and will respond within the period the law requires. Do not send your password or full card details. If someone else uploaded a photo of you, you can contact us without an account — include the link or anything else that helps us find it.

You can complain to your local data-protection authority where one exists. Exercising a privacy right does not cancel any protection consumer or data-protection law gives you.

9. Security and international processing

Account authentication and task-ownership checks protect access to your records. No internet transmission or storage is perfectly secure, and publicly accessible media URLs have the limits described above — use a strong password and tell us fast if something looks off.

Our infrastructure and providers may process information in countries other than yours, where privacy laws differ, subject to applicable transfer requirements. If your request depends on where a provider sits, ask us and we will tell you what we know; using the site is not itself a transfer safeguard.

10. Children

The service is not for children under 13, and users must meet their local age requirements. If you believe a child gave us personal information without authorization, contact us and we will investigate and handle removal as required. A parent's permission to upload a child's photo does not authorize prohibited content of that child.

11. Changes and questions

We post updates on this page with a revised date and give additional notice of material changes where required. New processing that needs consent gets its own consent. Privacy questions go to support@rumpelstiltskin-ai.org.