Privacy Policy

Your photos never leave your device

The tattoo editor runs entirely in your browser. When you open a photo or a design, your own device reads, edits and exports it. We never upload, store or see your photos, and no image or AI service receives them, including when you use AI designs. Closing or reloading the tab discards them.

You can check this yourself: open your browser's developer tools, switch to the Network tab and use the editor. You will not see your photo sent anywhere.

AI designs

Create with AI draws a tattoo design from a description you type. When you press Create design, we send only your description and the style you picked to our server, which asks Alibaba Cloud Model Studio (its image models, run in mainland China) to draw it. Alibaba Cloud checks the description and the image against its content rules. We send the image back to your browser.

• We do not keep your description or the image. For each request we record only when it happened, the style, the model, whether it used a free design or a credit, and whether it worked (with an error code if it didn't).
• The designs you make are kept in your browser, under "Your AI designs", so you can add one again. They are not sent anywhere. Clearing your browser's site data removes them.
• AI designs need an account. Trying designs on your photo never does.

Your account

You sign in with Google, only to use AI designs. We receive and keep your name, email address and profile picture from Google, and a session cookie keeps you signed in. We also keep your credit balance, your credit history and your orders.

Delete your account at any time: in the editor, open Designs → Create with AI and choose Delete account. This removes your account, sessions, credits and order history from our database straight away; database backups expire within days. The request records described under AI designs stay, without anything that links them to you. Unused credits are lost. Your payment provider keeps the payment records the law requires it to keep. You can also email us to access, correct or delete your data.

Accounts are for adults only.

Payments

Credit packs are paid through Waffo Pancake, our Merchant of Record, which handles the payment and any tax. We never see or store your card details. We receive the order details we need to add your credits.

What we measure

We count page views with Cloudflare Web Analytics, which uses no cookies, doesn't track you across sites and doesn't build a profile of you.

To learn which features are useful, we may record usage events such as "a sample photo was used", "a PNG was downloaded" or "an AI design was made". These events hold only counts and categories (for example the warp mode or the AI style). They never include images, file names, or anything you typed.

Who helps us run the site

• Cloudflare: hosts the site and our server, and counts page views.
• Neon: hosts our database (in the United States).
• Google: signs you in.
• Alibaba Cloud Model Studio: draws AI designs from your description.
• Waffo Pancake: processes payments for credit packs.

Each receives only what it needs to do that job. We don't sell your data, and there are no ads.

Google user data

We use the name, email address and profile picture from your Google account only to create your account, sign you in and show who is signed in. We don't use them for ads, don't sell them, and share them only with the providers above as needed to run the service. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Changes

If we change how we handle data, we update this page and its date first.

Contact

Questions about privacy, or a request about your data: hello@virtualtattoosimulator.com.