Privacy notice

Not a completed launch policy: the merchant’s legal identity, address where required, privacy contact, applicable regional disclosures, and retention review are not yet configured. Public generation and live payments remain closed. These items must be completed and reviewed before the service opens to customers.

Information used by the service

When configured and enabled, sign-in uses an email address, account name, authentication identifiers, and session records. Image uploads contain the image you choose and technical details such as its format and size. Generation records include the chosen subject category, job status, timestamps, and credit entries. Purchase records contain order identifiers, payment status, and the credit pack purchased.

Security checks may use request metadata, including an IP address and rate-limit records. Do not upload documents, private account details, sensitive background information, or images of people who have not agreed to the intended use.

What “private uploads” means

Uploaded images and generated files are stored in a private Cloudflare R2 bucket. The application does not create a public gallery from your uploads. Download requests check the signed-in account, completed job status, and access window. “Private” does not mean that no processing provider can receive the media: generation providers process it, and the actual generation prompt is sent for an AI NSFW-intent check. The application does not send input images or generated videos for a separate AI content review.

Providers and processing

• Cloudflare: application hosting, database, private object storage, image processing, task execution, and AI safety or generation routing.
• Pruna: the candidate motion-transfer models accessed through Cloudflare’s AI interface when an authorized real-generation test is enabled.
• Stripe: hosted checkout and payment processing when payments are enabled. Payment details are entered on Stripe’s checkout, not into a custom card form on this site.
• WeCom (Tencent): operational payment alerts to the merchant’s private group contain only an order identifier, the order amount and currency, and confirmation that credits were granted. No customer email, card information, uploaded photo or generated video is included.
• Google and Resend: Google sign-in and email-link sign-in. Resend delivers requested authentication emails; these are not marketing subscriptions.

Those providers have their own terms and privacy practices. Their processing locations and retention rules may differ from this application’s access windows. See Cloudflare’s privacy policy and Stripe’s privacy policy. This draft does not make an unverified claim that all providers never retain media or never use it for any secondary purpose; provider settings and contractual terms must be reviewed before launch.

Retention and download windows

Input uploads expire for new generation requests after 24 hours. Ready output downloads expire after 30 days. These are application access windows, not a claim that every provider backup or log is erased at that exact instant.

The intended production policy is to purge expired input and output objects on a scheduled basis, including temporary and rejected media. Actual deletion and recovery behavior must be verified before public launch. Account, security, payment, and credit-ledger records have separate purposes and are not deleted merely because a photo or download expires; their final retention schedule must be published before sales open.

Cookies and safety review

Optional Google Analytics measures public-page visits, and Microsoft Clarity provides public-page heatmaps and session replay, only after you choose “Allow analytics”. Declining leaves both libraries unloaded. You can withdraw permission through “Analytics settings” in the footer. Advertising personalization is disabled. Private generation pages do not load these tools; Clarity is also not loaded on pages with query strings or fragments. Clarity can process public-page interactions and browser/device information. See how Google uses information from sites using its services and Microsoft’s privacy statement.

Authenticated features use essential session cookies. The application uses AI only to check the actual generation prompt for NSFW intent. A detected NSFW intent is rejected; an unavailable or unreadable classification stops the job as a service error, not a content violation. Input images and generated videos receive file checks, not a separate AI content review. Generation-provider safety filters remain enabled. These measures do not guarantee that outputs are free of prohibited content. The product should not be used to store particularly sensitive personal information. Any additional analytics or non-essential tracking introduced for launch must be disclosed and configured appropriately.

Requests and merchant contact

The service operates under the name burningbridges. For privacy, account or deletion requests, contact service@burningbridgesai.fans. Incoming support emails are forwarded through Cloudflare Email Routing to the operator's inbox. Do not email passwords, card details or sensitive media.

Read the draft terms and credit and refund explanation for the related service boundaries.