Privacy Policy

This policy explains what Rumpelstiltskin AI (www.rumpelstiltskin-ai.com) keeps about you, why, for how long, and who processes it for us. The short version: your uploads and free previews are deleted after 24 hours and unlocked files after 30 days; we don't sell your data or use your files to train AI models. Questions: support@rumpelstiltskin-ai.com.

1. What we keep and for how long

• The background you upload: kept in our file storage for 24 hours, then deleted. We keep it that long because unlocking a video makes the clean file from it. If anything is missed, a storage rule deletes it after 2 days.
• Free previews (watermarked): deleted 24 hours after they are made.
• Unlocked files and AI re-render results: deleted 30 days after they are made.
• A record of each video, without the files: which move, whether the background was a photo or a video, its status, whether it was unlocked, the moderation result, why it failed if it did, timings, and the device and account it belongs to. We use it for your history page, free limits and our statistics.
• Moderation records: the time, the video they belong to, which check it was, the result and the moderation model's answer. Kept long term, because our payment provider can ask us to show our moderation records.
• A random device ID, kept in your browser's storage and in a cookie: links your previews to your browser and counts free previews.
• Your IP address: used to count free previews per day (the count starts over every day at midnight UTC), to stop abuse and to tell which country a visit comes from.
• If you sign in: your email address (and, with Google sign-in, the name and profile picture Google shares); your sign-in sessions; your credits, Pro status, credit history and whether you unlocked the sticker pack.
• Sign-in emails: the address a link was sent to, the IP address that asked for it, and how many links were sent in the last hour, to stop abuse.
• Payments: Waffo Pancake handles your payment details. We receive the order number, the product, the amount, the status and the email address you paid with.
• Usage events, linked to the device ID or your account: the page you landed on, the site and campaign that sent you, device type, country, whether the visit looks automated, and actions such as starting a video, seeing a preview, seeing prices, going to checkout and downloading.

Records without an end date above are kept until you ask us to delete them (section 5).

2. Your uploads

For a video, your browser usually shrinks it and removes its sound before uploading; if it can't, the original file is uploaded. Your background is used only to make your videos and to check them. A video's link carries a random ID that can't be guessed, so its preview can be seen only by people you give the link to. We don't use your uploads to train AI models and we don't sell them.

Your background (or three frames from your video) is sent to fal.ai for an automated moderation check. If you start an AI re-render, one image (your background with the little man in it; for a video, its first frame) is sent to fal.ai to make the AI version, and frames of the result are checked by the same moderation model. We don't send your name or email address to fal.ai.

3. Who processes data for us

• Cloudflare runs the Service: hosting, the database (in eastern North America), file storage, the servers that make your videos, sign-in emails, and Turnstile, which may run a check in your browser to tell people from bots.
• fal.ai (Features & Labels Inc., United States) runs the AI models: the moderation checks and the AI re-render, using the images described in section 2. How long fal keeps requests is set out in fal's privacy policy.
• Waffo Pancake, our merchant of record, runs checkout, payments, receipts, invoices, refunds and subscriptions, and receives your payment details directly.
• Google: if you sign in with Google, including the one-tap prompt, Google sends us your name, email address and profile picture. Google Analytics, on www.rumpelstiltskin-ai.com only, records which pages are visited and where visitors come from, using cookies; we don't send it what you do in the tool.

We don't sell your data.

4. Cookies and browser storage

• Device ID (browser storage and a cookie of the same name): counts free previews and links your previews to your browser. Kept until you clear your browser data.
• Bot-check pass (cookie): shows you passed the Turnstile check; 24 hours.
• Sign-in session cookies: only if you sign in; until you sign out or the session expires.
• Google Analytics cookies (_ga and _ga_*): only on www.rumpelstiltskin-ai.com, to count visits. We don't turn on Google's advertising features.

You can block or delete cookies in your browser settings, but making videos and signing in need the device ID, bot-check and session cookies.

5. Your rights

You can ask for a copy of the data we hold about you, or ask us to correct or delete it: email support@rumpelstiltskin-ai.com from the address on your account. We complete requests within 30 days. Deleting your account removes your email address, your credits, your history and your files; it doesn't refund unused credits or Pro time (refunds follow the Refund Policy).

We keep moderation records after an account is deleted, without your email address, because our payment provider may ask to see them. Payment records kept by Waffo Pancake follow its own policy and legal retention rules. People in the EU and UK have rights under the GDPR and people in California under the CCPA; we honor these requests for everyone.

6. Children

The Service is not meant for anyone under 13, and we don't knowingly collect their data. Photos and videos that show anyone under 18 are not allowed (see the Terms). If you believe a child has given us personal data, or that a video shows a minor, email us and we will delete it.

7. Changes

We may update this policy. Changes are posted on this page with a new date, and important changes are also emailed to account holders. See also the Terms and the Refund Policy.