Privacy Policy

What this policy covers

RemixThatPhoto is an image to image editing service. This policy describes the information used to run the editor, protect it from abuse, process paid credits, and answer support requests.

Information used by the editor

When you submit an edit, the service may receive and store:

• The source image, its file type, dimensions, size, and a content hash.
• The editing mode and the direction you enter in the prompt box.
• The selected output size (Standard 1 MP, Detail 2 MP, or Large 4 MP) and the credit cost for an account edit.
• Safety review results for the direction, source image, and generated image.
• Task, quota, credit, and provider status records needed to prevent duplicate charges and retrying an unknown provider task.

The source image is uploaded to private R2 object storage. A short lived signed route lets the configured image provider fetch the source. The configured BFL image provider generates the result, and the result is downloaded, checked, and stored as a private R2 object before the service gives you a result route.

The service sends the prompt and image URLs to SeeAPI for content safety checks before delivery. These providers process data under their own terms and privacy policies. We do not make a separate promise about provider-side retention or training practices.

Accounts, cookies, and payments

If you create an account, the authentication system uses your email address and account records. An anonymous editor session uses a signed rtp_guest cookie and a one way trusted network signal to enforce its daily allowance. The raw network address is not used as the quota record. The service may also set an attribution cookie when a visit includes a campaign parameter. Authentication, hosted checkout, analytics, advertising, and support tools may set their own cookies when those features are enabled.

Payment providers process checkout details. RemixThatPhoto stores order, payment status, transaction, and credit ledger records needed to grant or reconcile a purchase; it does not receive full card numbers from hosted payment forms.

How information is used

We use this information to:

• Validate and process an image edit.
• Run prompt and image safety checks before delivery.
• Keep source and result objects private and enforce owner access.
• Enforce anonymous limits, credit balances, idempotency, and provider reconciliation.
• Deliver result files without a RemixThatPhoto-added watermark. Provider or source content may carry its own marks; the service does not remove those marks or grant rights to third-party content.
• Process purchases, refunds, support requests, security events, and abuse prevention.
• Operate optional analytics, advertising, and customer support integrations when enabled.

Storage, retention, and deletion

Source and result objects are private. Confirmed failed or rejected edits attempt to delete their private objects. Successful objects remain available to the account or anonymous task until the configured private retention cleanup runs; the current code defaults this retention window to 30 days and performs cleanup through an administrative cleanup path. Cleanup failures leave the object and task record for a later attempt. Provider tasks with an unknown status are preserved for reconciliation rather than deleted or submitted again.

Account, order, credit, safety, and task records are retained as needed for access control, payment reconciliation, abuse prevention, and support. A deletion request may be sent to the contact address below; the service will review related legal, payment, and security retention requirements before responding.

Security

Connections to the service and provider endpoints use HTTPS where supported. Private image reads require a signed route or an authenticated owner check. No internet transmission or storage system is completely risk-free, so do not upload an image you are not authorized to process.

Your choices

You may stop using the editor, delete browser cookies, or request help with account and personal information by contacting us. Deleting a cookie can remove the browser's anonymous session identity, but it does not erase server-side task or payment records.

Changes and contact

We may update this policy when the service, providers, or data handling changes. The revision date above identifies the current text.

For privacy questions, email hello@remixthatphoto.com.

Google Analytics

We use Google Analytics 4 to measure public page visits and referring sites. Enhanced measurement is enabled for public browsing, including scrolling, outbound links, site search, video engagement, file downloads, and form interactions where available. Collection stops for the rest of the page visit when you interact with a private tool or account link. Page URLs omit query strings and fragments; we do not send uploaded files, editor input, prompts, account details, or payment information. Analytics cookies last up to one year. In the EEA, UK and Switzerland, analytics storage stays off until you accept; elsewhere it is on by default. Unknown locations default to off. You can change or withdraw your choice using Privacy settings in the footer. Advertising storage and personalization stay off. When storage is off, Google may receive cookieless measurement signals. Google processes usage and device information under its privacy policy.