Skip to content

Privacy notice

Describes the current implementation. Last reviewed against the code on 2026-11-13.

Draft for owner review. This notice describes what the software does. The operator identity, contact details, jurisdiction and data-retention periods have not been supplied and are deliberately left out. They must be added by the owner before public launch.

Information the service stores

  • Account: your email address and a salted, hashed password. The password itself is never stored.
  • Sessions: a hashed session identifier, creation and expiry time, a one-way hash of your IP address and the first 200 characters of your browser’s user-agent string.
  • Audit log: sign-in, sign-out, invite and media events with a timestamp and a one-way IP hash.
  • AI Director usage: request identifier, model name, status, duration, number of frames and token counts. Frames and prompts are not stored.
  • Server media (when used): file metadata (type, size, checksum, owner, project) and the file itself in object storage, only for files you upload to server storage.

Information that stays in your browser

Projects, settings and the media library you import into the studio are kept in your browser’s local storage and IndexedDB by default. They are not uploaded unless you use a server-storage feature.

Third-party services

  • Cloudflare hosts the site and stores account and media data.
  • OpenRouter and the model provider you select receive the sampled frames, text and settings you submit when you run the AI Director. Do not submit footage you are not permitted to share.
  • Google Fonts is loaded from your browser to display typography.
  • Website Capture, when enabled, loads the pages you ask it to record through a remote browser.

Your choices

You can clear browser-stored projects at any time through your browser settings. Account export and deletion are not yet self-service; until they are, contact the studio owner. See the support page.