Privacy policy

1. Operator and contact

Albumtale is operated under the name OPC one person business. Contact: caspian.haodong@gmail.com. No registered entity, address or governing jurisdiction is asserted in this version.

2. Data you provide

Product accounts use email and password. We store your email, display name, password hash, session records, photos, text, layouts, conversations, image observations, AI tasks and editing history. Google login, payment collection and email password recovery are not connected.

3. Storage and purposes

Cloudflare D1 stores account and space data. Private R2 stores originals, display images, thumbnails and saved videos. IndexedDB keeps drafts and caches on your device. We process this data for storage, editing, recovery, AI requests, exports, quota accounting, security and support. Clearing browser storage can remove local drafts.

4. Privacy and access

Cloudflare Access gates the private site, media and API; product accounts control access to spaces. Your content remains yours. Duplicate-photo reuse stays within your account. The operator and technical providers process data needed for the service. Private access does not mean end-to-end encryption or a guarantee against data loss.

5. AI processing

When you start AI chat, layout or video planning, relevant thumbnails, text, messages and image observations are sent to the DeepSeek API and leave your device. Requests, results and usage are saved. Manual editing does not require AI. Do not send sensitive personal data to AI. We do not promise that DeepSeek excludes training, retains no data or processes data in your country. Opus is not connected.

6. Video rendering

Video rendering runs in your browser; saved videos may be stored in private R2. There is no cloud rendering. Remotion license telemetry sends license information, site origin, render status and usage, and records the client IP address. That telemetry does not include your photos, text or video content. Provider retention rules apply.

7. Waitlist, cookies and analytics

The public waitlist stores email, preferences, feedback, language and submission time in D1. It is not sent to AI. Use your private withdrawal link or contact us to request removal; records older than 365 days are scheduled for deletion. Session and Access cookies support login and security; language preference is stored. Public pages use Cloudflare Web Analytics for visits and performance. Private pages do not load this analytics beacon.

8. Retention and deletion

Test data is retained to provide the test or until a deletion request is handled. Simulated subscription expiry does not delete media. Under the paid-launch plan, purchased and bonus points have no expiry. After the paid period ends, a positive permanent-point balance retains editing and AI access, with the 10 GiB storage limit and no limit on space count. A 365-day read-only period starts when the paid period has ended and the permanent-point balance is zero; content is deleted after that period. Export before deletion. Security, legal and backup retention periods must be confirmed before paid launch; provider copies follow provider rules.

9. Your requests and transfers

Contact us to request access, a copy, correction or deletion of data, account deletion, restriction, objection or withdrawal of consent where applicable law provides these rights. We may need account verification. Account deletion is not a current self-service feature. Cloudflare, DeepSeek and Remotion may process data outside your country; location and transfer safeguards require launch review. You retain rights to contact a competent privacy regulator.

10. Exports and changes

An offline ZIP snapshot contains original text, photos, space relationships and saved videos. Protect copies you download or share; deleting cloud data does not erase those copies. We will publish policy changes and give notices required by law. Material data-use changes and rules for minors require confirmation before paid launch.

Provider information

• Cloudflare
• DeepSeek
• Remotion