Privacy Policy

This policy explains what personal data ThumbnailSnap collects when you use the Service and how we use it.

Updated October 25, 2026

What we collect

  • Account data: email address, name, password hash, and, if you sign in with Google or GitHub, your account ID, email and profile picture from that provider.
  • Content: descriptions you write, reference photos you upload, images we generate for you and exports you save.
  • Billing data: plan, orders and credit history. Card details are entered on Stripe's pages and never reach our servers.
  • Technical data: IP address and request logs used for security and abuse prevention.

How we use it

To run the Service (sign-in, generating and storing your images, billing), to prevent fraud and abuse, to answer support requests and to improve the product. We do not sell your personal data and we do not use your uploads to train our own models.

Who processes it

  • Stripe for payments and invoices.
  • AI image providers that receive your prompt and any reference photo to generate the image.
  • Google and GitHub, only if you choose to sign in with them.
  • Our hosting provider, which stores the database and image files.

Cookies and local storage

We store your session token in your browser's local storage and set one short-lived cookie during Google or GitHub sign-in to protect against forged requests. We do not use advertising cookies.

Retention

We keep your account data and images until you delete them or your account. When you delete your account we remove your images, uploads, generation history and sign-in connections and anonymise your profile. We keep anonymised payment records as long as tax law requires.

Your rights

You can download all your data (Account → Settings → Download my data), correct your name, and delete your account at any time. Depending on where you live you may have further rights, such as objecting to processing or complaining to a data protection authority. Contact us to exercise them.

Children

The Service is not intended for anyone under 16 and we do not knowingly collect their data.

Contact

See also