Privacy Policy

Last updated: October 12, 2026

1. What We Collect

• Account data: Email address, display name (optional), hashed password (managed by Supabase Auth).
• Usage data: Generation history, job status, credit transactions, machine type selections.
• Product analytics: How you use the site, pages viewed, buttons and elements you interact with, generated result previews shown after generation, and (via session replay) a video-like reconstruction of your visit, collected through PostHog to help us improve the product. See section 4.
• Payment data: Stripe handles all payment information. We store only your Stripe Customer ID, never raw card details.
• Subscription feedback: If you accept a cancellation feedback invitation, we store your selected reason, message, subscription cancellation state, and reward status so we can respond and prevent duplicate credit rewards.
• Temporary job uploads: Images sent to the AI builder and server-backed tools are staged in Cloudflare R2. A scheduled cleanup removes staging files after they are more than 2 hours old.
• Generated designs: Results are returned to your browser. When account design history is enabled, thumbnails, design variants, and available export files are saved separately. Each saved design is kept for 14 days. Every purchase keeps all saved designs for at least 90 days from the payment, and an active subscription keeps them for as long as it lasts. Expired and deleted designs wait in Recently deleted for 7 days before their files are removed. Paying customers get email reminders 7 days and 1 day before saved designs leave My Designs. The date for each design is shown in My Designs.
• Traffic source: Our first-visit record keeps a broad source category, the referring website's origin and your landing page, without the link's query string or fragment. Campaign source tags are reduced to categories such as Google or other, rather than stored verbatim. We do not use this to build a profile of your activity on other sites.
• Log data: Standard server logs (IP address, request path, timestamps) for security and debugging. Operational-log retention follows the current hosting configuration and is kept only as long as needed for those purposes.
• Advertising: On our free tools only (never on your account, your history, or the AI builder), we show ads through Google AdSense. Google and its ad partners use cookies and similar technologies to serve and measure ads, which may be personalized based on your prior visits to this and other sites. See the Advertising section below.

2. What We Do NOT Store

• We do not use uploaded images to train our own models. AI-builder images and instructions are sent only to the AI processors listed in section 4 to perform the transformation you request. Browser-only tools keep files on your device when the tool says processing happens in your browser.
• We do not sell or rent your personal data for money, and StencilCut does not run its own cross-site advertising or hand your account data to advertisers. The only advertising on the site is Google AdSense on the free tools; Google's use of cookies for that is described in the Advertising section and section 5, and is governed by Google's own privacy policy.

3. How We Use Your Data

• To operate the service (process jobs, track credits, manage your account).
• To send transactional emails (email verification, purchase receipts, subscription status notices, and bug report updates).
• To review voluntary cancellation feedback and apply the displayed one-time credit reward.
• To detect and prevent abuse (rate limiting, spam protection via Google reCAPTCHA).
• To understand how the site is used and improve it, using PostHog product analytics and session replay (see section 4). For signed-in users this can be tied to your account ID and email.

4. Third-Party Processors

Analytics & session replay (PostHog)

We use PostHog (hosted in the United States, us.i.posthog.com) as our product-analytics platform to understand how people use StencilCut and to improve the experience. Because PostHog is a broad product-analytics tool, it can do a lot, here is specifically what it does for us:

• Event & pageview tracking: records page routes and actions such as tool use and downloads. We remove query strings and fragments from URLs sent in PostHog events and omit text and arbitrary element attributes from automatic interaction capture.
• Purchase events: when you open the buy page, start a checkout or complete a purchase, we record the plan or credit pack, the amount and currency, and which Buy button brought you there. Stripe handles the payment itself: card details never reach us or PostHog.
• Session replay: reconstructs layout, mouse movement, clicks, navigation and on-page changes to help us find confusing or broken flows. Interface text, instructions, processing messages and button labels can be readable. Generated result previews displayed after generation, including versions you edit or invert, can also be visible so we can assess output quality and understand whether the result matched the selected method and style. Public style example images and interface icons, which are the same for every visitor, are also visible so we can see which options were chosen. Original uploaded images, prompts, StencilCut AI chat messages, highlighted areas, input values, SVG artwork, editor canvases, private links and download links remain blocked. Email addresses in displayed text are redacted. Replay console logs and network request details are excluded.
• User identification: for signed-in users, ties this activity to your account using your user ID, email, paid status and role, so we can analyze the experience across sessions and devices. Anonymous visits are kept separate until you sign in.
• Product improvement: we may also use PostHog's funnels, heatmaps, feature flags, and A/B experiments to test and roll out improvements to the site.

PostHog temporarily stores analytics and replay data so authorized StencilCut personnel can review how the product is used. Generated result previews visible in a replay are used only for internal product research, output-quality review and experience improvement. We do not export or download PostHog recordings, use replay images to train AI models, sell them, publicly share them, or create a separate image library from them. Recordings are deleted according to the retention period configured in PostHog. Original uploaded files remain excluded from replay. This is separate from the temporary processing and optional saved design history described in section 1.

We use this only to operate and improve StencilCut. We do not use PostHog to sell your data or to advertise to you on other websites. If you want your analytics data removed, contact us using the details below.

Advertising (Google AdSense)

Our free tools are supported by ads served through Google AdSense. Ads appear only on those free tools. They are never shown on your account, your generation history, or the AI builder. To serve and measure ads, Google and its partners use cookies and similar technologies, and may show you ads personalized to your interests based on your prior visits to this and other sites.

• Google's use of advertising cookies is explained in Google's Advertising & Privacy notice and its Privacy Policy.
• You can turn off personalized advertising in your Google Ad Settings, and opt out of many third-party ad-personalization cookies at aboutads.info and, in the EU, youronlinechoices.eu.
• If you are in the European Economic Area, the UK, or Switzerland, we ask for your consent before advertising cookies are used, through Google's consent message, and you can change your choice at any time.

5. Cookies

We use session cookies for authentication (managed by Supabase Auth) and first-party cookies / local storage for PostHog analytics (see section 4) so we can measure and improve how the site is used. On our free tools, Google AdSense and its partners also set third-party advertising cookies to serve and measure ads, as described in the Advertising section above; you can control those through the choices linked there. We do not place advertising cookies on your account, your history, or the AI builder.

6. Your Rights

• Access: You can view your account data and transaction history in your Account page.
• Deletion: To request account deletion and erasure of all associated data, email [email protected]. We will process requests within 30 days.
• Portability: You can export your transaction history from the Account page.
• Correction: Update your display name from the Account page at any time.

7. Data Security

All data is encrypted in transit (TLS 1.2+). Supabase encrypts data at rest. Access to production systems is restricted to authorized personnel only. We use Row Level Security so users can only access their own data.

8. Children's Privacy

This service is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has created an account, contact us immediately.

9. Changes to This Policy

When a material change affects data used by the AI Builder, we present the updated disclosure and require acceptance before the next generation. We may also provide advance notice by email when required by law or appropriate for the change.

Contact

Privacy questions: [email protected]