Privacy Policy

What this public preview does

Image Studio at christmasai.site lets you browse examples, select a photo for a browser-only preview, and try email-code sign-in, with Google available when enabled. Photo uploads, AI portrait generation, purchases and payments are disabled. Selecting a photo keeps it in browser memory; it is not sent to Image Studio or a generation provider and is not saved in browser local storage.

Account data and necessary cookies

If you sign in, we store your account ID, name, email, verification status and authentication records in a private Cloudflare D1 database. When Google sign-in is enabled and selected, Google shares the basic profile information needed for sign-in. OAuth tokens are encrypted before storage. Authentication sessions use necessary HttpOnly cookies and last up to 7 days; signing out ends that session but does not delete the account.

For email-code sign-in, Resend receives your requested email address and the code to deliver the message. Codes are stored hashed, expire after 5 minutes, and can be used once. We retain security counters with keyed email hashes to limit sending; they are not a marketing list. The preview permits at most 30 sending reservations per UTC day, 5 per address per UTC day, and one per address per minute. Failed delivery can still consume a reservation.

Hosting, records and your choices

Cloudflare hosts the preview and handles web requests. Account/session records and technical request metadata support authentication and security. This preview adds no advertising, analytics or session-replay service. We have no automatic account-deletion schedule or self-service deletion control yet; signing out or clearing cookies does not remove account records.

Contact support@christmasai.site for privacy questions, account access or deletion requests. Requests are reviewed manually. Do not send a photo, password or sign-in code to support. We will update this policy before enabling additional processing.