Privacy policy

1. Photos you choose

When you select your own photo or an outfit reference (including a person wearing the clothing), the outfit studio creates a temporary local preview using your browser’s memory. Selecting a photo does not send its contents or filename to our server. The photo is not saved in browser local storage or an account, and our application does not train a model using it.

Removing or replacing the photo releases its local preview. Reloading the page or leaving the studio also clears the preview. Copies that already exist on your device are not affected.

2. Sample images and downloads

The wardrobe and demo use prepared, AI-created images served as website assets. Viewing a sample requests that image from the website host. Downloading a sample saves a copy to the location chosen by your browser; you control that downloaded file.

3. Basic website requests

Like other websites, loading this site requires your browser to communicate with the hosting service. The host may process ordinary connection information, such as your IP address, requested URL, browser details, and request time, for delivery, security, and operational logging. The photo you select for a local preview is not included in these requests.

4. Cookies, analytics, and advertising

For generation abuse prevention, the protected service derives a keyed network identifier from the verified client IP address (IPv6 addresses are grouped by network prefix). The rate limiter stores this identifier and hourly attempt timestamps plus daily counters, not the raw IP, photo, or prompt. Inactive records are normally removed after two days. People sharing a network may share this limit; it is not a unique-person or account identifier.

The studio uses a signed, first-party anonymous cookie (ac_visitor, up to 30 days) to keep your daily generation count consistent across visits in this browser. It is not a login and is not shared with ad providers. The backend stores the latest daily count and temporary generation tickets and cost reservations; inactive usage records are normally removed after two days. Failed attempts can still count toward quotas. Requests with an uncertain provider outcome are retained until their completion is confirmed to prevent repeat charges. Changing devices or clearing this cookie creates a new anonymous visitor. This does not reset a separate network-level attempt limit.

The production website loads Monetag advertising scripts for in-page push, browser push notifications and vignette ads, and provides labeled sponsored links. Generate and Download are counted separately: odd clicks show a sponsored dialog; even clicks open an advertiser in a new tab while the requested action continues. These third parties may receive your IP address, page URL, referrer, browser and device information and use cookies or browser storage. We do not explicitly send photos or prompt text to advertising APIs. You can block advertising requests and remove site data through browser controls. Local development uses test artwork and local frequency counters only; production stores separate generation and download click counters in local storage; they remain until site data is cleared. Browser push notifications require your browser permission and use a provider service worker. Revoke notification permission through your browser’s site settings to stop receiving notifications.

We use Google Analytics (Google tag G-W8LMKYSJJY) to understand website visits and navigation. Google may process page URLs, referrers, browser and device information, interaction events, and analytics identifiers, and may set analytics cookies. We do not send uploaded photos, generated images, or prompt text as analytics events. Avoid including personal information in page URLs. You can block analytics through browser controls or the Google Analytics opt-out browser add-on. See Google’s Privacy Policy for provider information.

When production generation is available, Cloudflare Turnstile checks for automated traffic. Your browser contacts Cloudflare for the challenge; our server verifies the resulting token, action, and hostname before issuing a generation ticket. Cloudflare may process browser, device, and network signals for this security check. Photos and prompts are not sent to Turnstile. See Cloudflare’s Privacy Policy.

See the Cookie & Storage Policy for storage names, lifetimes, and browser controls, and the Advertising Disclosure for how previews appear.

5. Image and outfit generation

Both studios use Artflow (api.artflow.vip) to generate images. When you click Generate image, the website server sends your prompt, selected dimensions, and optional reference image through our Cloudflare Workers backend to Artflow. The server returns the resulting image to your browser. Reference filenames are replaced with a generic filename before forwarding. Image files may still contain embedded metadata. For Generate outfit, the server combines your person and clothing photos into a single reference image in memory, removes embedded metadata during this preparation, and sends it with outfit instructions to the same backend. Text style sends just your person photo and clothing description, with the same metadata removal. Only submit material you are comfortable sharing with the provider.

This site currently does not use an independent image moderation service. Basic keyword checks apply to prompts, but they do not inspect uploaded or generated image content and are not a guarantee that content is appropriate. The operator manages content policies and reports. Artflow may apply its own restrictions; we have not verified comprehensive input/output image review by that provider. Do not upload prohibited material, and report concerns through our contact page.

The application processes these images temporarily in memory and does not write prompts, uploaded images, or generated results to a database, file gallery, or application log. This is not a guarantee about Artflow’s retention or training practices; those practices have not been verified for this integration. Closing the page clears the local result but does not cancel or delete processing already started by Artflow.

The Cloudflare backend stores a shared request counter and temporary random request-slot identifiers to enforce generation limits. These records do not contain your prompt or image. Operational errors may be inspected for troubleshooting; credentials are removed and request bodies are not logged by the application.

6. Your choices

• Explore the sample demo without choosing any personal photo.
• Remove a local photo at any time using the remove button in the studio.
• Close or reload the studio to clear the current photo preview.
• Manage any downloaded sample files using your device’s normal file controls.

7. Privacy requests and provider processing

Depending on your location and applicable law, you may have rights to access, correct, delete, restrict, or object to the processing of personal information. Our contact page explains the current contact availability and details to include. We may need information to identify a request, but do not send private photos or identity documents in an initial message.

Cloudflare and Artflow may process information outside your country. Their own infrastructure, retention, and processing terms may apply. We have not verified a provider-specific retention period or a promise that provider inputs are excluded from training. Do not submit sensitive information unless you are comfortable with this processing. Photos used for outfit try-on should depict consenting adults.

8. Changes to this policy

This policy describes the current service. Material changes to data handling will be reflected here with an updated date and, where appropriate, an in-product notice. For practical questions about the preview, see the FAQ.