Privacy

What we collect

• —The photo you upload, and the style and placement you pick.
• —Your email address, but only if you buy — it comes from Stripe at checkout and is what your access is tied to.
• —A one-way fingerprint of your IP address and browser (a keyed hash, not the address itself) so one device can't burn through the free tier. We can't reverse it back to your IP.
• —Anonymous page and event counts. No cookies, no cross-site tracking, no advertising profile.

Why we're allowed to

We process your photo to deliver the thing you asked for — that's contract performance. The device fingerprint and the anonymous counts rest on our legitimate interest in not being drained by abuse and in knowing whether the product works at all. If you're in the UK or EU you can object to that legitimate-interest processing; write to us and we'll handle it.

Who else processes your data

We're a small operation and we don't run our own infrastructure. These companies process data on our behalf, and nobody else does:

• Google (Gemini API)

  Generates the cover-up design from your photo.

  Your photo and the design prompt are sent to Google's paid Gemini API. On the paid tier Google does not use this data to train its models. Google does retain it for a limited period for abuse monitoring, which is why we say we delete photos from our systems rather than claiming they are erased everywhere.

• Supabase

  Database and encrypted file storage (US region).

  Photos and generated images live in private buckets that are not publicly listable. Access goes through short-lived signed links only.

• Stripe

  Seller of record and payment processing.

  Stripe sells this purchase to you as merchant of record: it collects your card details and email directly, issues your receipt, and handles the tax on the sale — we never see or store a card number. That makes Stripe a controller in its own right for the sale, its records, and its fraud and compliance obligations, not only a processor acting for us.

• Resend

  Sends the one email that gives you access after you buy.

  Resend sees your email address and the contents of that email.

• Vercel

  Hosts and serves the site.

  Standard request logs, retained for a short period.

• Plausible Analytics

  Counts page views and product events.

  Plausible sets no cookies and builds no cross-site profile. It never receives your photo, your email, or the reason a design was declined.

Some of these providers process data in the United States. Where that involves data leaving the UK or EEA, the transfer relies on the provider's standard contractual clauses.

How long we keep things

Your photo — you didn't buy

Deleted from our systems within 24 hours of upload.

Your photo — you bought

Deleted from our systems within 24 hours after your 7-day access ends.

Generated designs

Deleted on the same schedule as the photo they came from — 24 hours for free sessions, within 24 hours after access ends for paid ones. Anything you downloaded is yours and stays on your device.

Purchase record (email, amount, dates)

Kept for as long as tax and accounting law requires — up to 7 years — because we're legally obliged to. This record does not contain your photo.

Device fingerprint

Rolling 24-hour window, then it stops mattering and is cleared with the session.

Anonymous analytics

Aggregate counts only. Not linked to you and not deletable individually, because there is nothing in them to identify.

Deleting your data, and your other rights

Email privacy@coverupmy.ink and we will delete your photo, your generated designs and your session on request. We answer within 72 hours. You don't need an account and you don't have to give a reason. The purchase record stays, because we're legally required to keep it.

You can also ask for a copy of what we hold, ask us to correct it, or object to the processing described above. If you're in the UK you can complain to the ICO; in the EU, to your national data protection authority.

Age

This isn't for under-18s. We don't knowingly process photos of minors — if one reaches us, tell us and we'll delete it.

Changes

If we change how any of this works, we change this page and move the date at the top. The version you agreed to at checkout is the one in force for your purchase.

Contact

privacy@coverupmy.ink — for deletion requests, access requests, or anything else on this page.