HESONGTING ("we") respects your privacy. This Policy explains how we collect, use, store and share personal information when you use Tattoo Preview (the "Service"), and the rights you have.
The data controller for the Service is:
By using the Service, you acknowledge that you have read this Policy. We will notify you in advance of material changes by email or an in-app notice.
Below is the complete list of personal data we handle. We do not collect sensitive data such as government ID numbers, precise location, or biometric identifiers, and we do not run face recognition on your photos.
| Category | Data | Source | Where it is kept |
|---|---|---|---|
| Photos and designs in the free Editor | Body photos, tattoo designs and text you add | You | Only in your browser; never uploaded to us |
| AI Render inputs | The composite image of your body photo with your tattoo design placed on it, its width and height, and the selected body part | You, only when you start an AI Render | Sent to our AI provider for that render; not stored in our database |
| AI Render outputs | The generated image and its URL, plus render status, provider, model, credits charged and timestamps | Generated by the AI provider | Render record in our database; image hosted by the AI provider |
| Account information | Name, password (stored only as a secure hash), email verification status, account ID and sign-up time | You | Our database |
| Sign-in codes | One-time 6-digit codes emailed to you when you sign in with a code | Generated by us | Our database until used or expired (10 minutes) |
| Contact information | Email address, and any other contact details you give us in support, refund or report emails | You | Our database and support inbox |
| Payment information | Credit pack, credits, amount, currency, payment status, payment time, which processor you used, the processor's order / session ID and, for Stripe, a customer ID. Card number, CVV, billing address and other details you enter at checkout are collected by the payment processor under its own privacy policy; we never receive your full card number, CVV or bank login. | You and our payment processor | Our database (transaction records); card data stays with the processor |
| Credit and usage records | Credit balance, purchases, spending, refunds and AI Render history | Generated by your use of the Service | Our database |
| Communications and reports | Support emails, refund requests, content reports, copyright notices and appeals | You | Support inbox |
| Device and log data | IP address and browser user agent (stored with each sign-in session), session and language cookies, request times, error logs and performance data; pages viewed, referrer, device type and approximate location measured by Google Analytics | Collected automatically | Our database and hosting logs; Google Analytics (see Sections 4 and 5) |
If you include other people in photos you upload, you must have their consent (see Section 10 of the Terms of Service).
| Purpose | Legal basis |
|---|---|
| Providing and maintaining the Service, including AI Renders | Performance of a contract |
| Billing, credit balance and payment processing | Performance of a contract |
| Customer support | Performance of a contract / Legitimate interests |
| Service emails (sign-in codes, signup confirmation, password resets, billing, security, policy updates) | Legitimate interests |
| Security and fraud prevention | Legitimate interests |
| Content moderation, handling reports and enforcing our Terms | Legitimate interests / Legal obligation |
| Product improvement and analysis | Legitimate interests |
| Legal compliance | Legal obligation |
We may aggregate or de-identify data for statistical analysis. Such data cannot identify you.
| Type | Purpose | Can be disabled |
|---|---|---|
| Strictly necessary | Keeping you signed in, security and checkout | No |
| Functional | Remembering your language preference | Yes |
| Analytics (Google Analytics 4: _ga, _ga_*) | Counting visits and page views, and understanding which pages and features are used | Yes |
We use Google Analytics 4 to measure how the site is used. It records pages viewed, approximate location (country / city derived from your IP address, which Google does not store), device and browser type, referrer and session duration. We do not send your name, email, photos or designs to Google Analytics, we have no advertising features or ad cookies enabled, and analytics data is not used to identify you.
Visitors in the EEA, UK and Switzerland: analytics cookies are switched off by default (Google Consent Mode). In that case Google Analytics only receives cookieless, aggregated signals and sets no analytics cookies on your device.
You can block analytics cookies through your browser settings, an ad/tracking blocker, or Google's opt-out add-on (tools.google.com/dlpage/gaoptout). Blocking them does not affect any feature of the Service.
We do not sell or rent your personal information, including "selling" or "sharing" as defined by applicable law (such as the CCPA), and we do not share it with advertisers. We share only the data each recipient needs, under contracts that require them to protect it and use it only to provide their service to us.
5.1 Third parties that receive data.
| Type of recipient | Provider | Data received | Purpose |
|---|---|---|---|
| Payment processors | Waffo Pancake; Stripe (where offered at checkout) | Email, pack and amount; card or payment details you enter on their checkout page | Processing payments, refunds and fraud checks |
| AI model providers | fal.ai and APIMart, running Google Nano Banana (Gemini 2.5 Flash Image) | The composite image you submit for an AI Render | Generating and hosting the AI Render |
| Cloud hosting, CDN and file storage | Cloudflare (Workers hosting, CDN and R2 storage for site files) | All traffic to the site, including IP address and request data | Running and securing the website |
| Database hosting | Neon | Account, credit, payment and render records | Storing account data |
| Email delivery | Resend | Email address and message content | Sign-in codes, signup confirmation, password resets, receipts and service notices |
| Website analytics | Google Analytics 4 (Google LLC); no advertising providers | Pages viewed, referrer, device and browser type, approximate location, and an analytics cookie ID (not set for EEA / UK / Swiss visitors) | Measuring site usage and improving the Service (see Section 4) |
5.2 Other disclosures.
If a security incident affects your rights, we will notify you and the relevant authorities as required by law within 72 hours of discovery. Please keep your account credentials safe and do not share them.
| Data type | Retention period | At expiry |
|---|---|---|
| Account information | While your account is active; up to 90 days after deletion | Deleted or anonymized |
| Transaction and credit records | As required by tax and accounting law, typically 7 years | Deleted |
| AI Render records | While your account is active | Deleted with your account |
| AI Render images | Not stored on our servers; result images are hosted by the AI provider under its own retention policy | Deleted by the provider |
| Support communications | 2 years | Securely deleted |
| Content reports and enforcement records | 2 years, or longer if needed for a legal claim or required by law | Securely deleted |
| Security and server logs | Up to 12 months | Securely deleted |
To exercise any of the rights below, email support@tattoospreview.com. We will respond within 30 calendar days.
| Right | Description |
|---|---|
| Right to be informed | Know what data we collect and how we use it |
| Right of access | Get a copy of your personal information |
| Right to rectification | Correct inaccurate or incomplete information |
| Right to erasure | Request deletion of your data in certain circumstances |
| Right to restrict processing | Pause processing in certain circumstances |
| Right to data portability | Receive your data in a machine-readable format |
| Right to object | Object to processing based on legitimate interests or marketing |
| Right to withdraw consent | Withdraw consent for consent-based processing |
If you believe we have not handled your request properly, you have the right to lodge a complaint with your local data protection authority.
We do not currently send marketing emails. If we do in the future, we will only do so with your consent, and every message will include an unsubscribe link. Service emails such as sign-in codes, receipts and security notices are not affected.
Our servers and service providers are located in the United States and other countries where Cloudflare operates. When transferring data across borders, we protect it by:
The Service is intended for users aged 18 and over. We do not knowingly collect information from anyone under 18, and photos of minors must not be uploaded. If you believe a minor has provided us with information, contact us and we will delete it promptly.
The Service may contain links to, or integrate with, third-party services. This Policy applies only to information we collect directly. We are not responsible for the data practices of third parties and recommend reviewing their policies.
For material changes, we will notify you at least 15 days in advance through an in-app notice or your registered email, and update the "Last updated" date at the top of this page. Continued use after the effective date constitutes acceptance.
This Privacy Policy is provided for information and does not constitute legal advice.
Questions about billing, refunds or your data? Email us at support@tattoospreview.com