Privacy Policy
What data TinyDesk collects, how photos are processed, which providers we use and your choices
Last updated: October 28, 2026
This Privacy Policy explains what personal data TinyDesk ("we", "us") collects when you use tinydesk.cc (the "Service"), how we use it and the choices you have. Contact: support@tinydesk.cc.
Data We Collect
- Account data. Your name, email address and password, stored as a secure hash. If you sign in with Google, we receive your name, email address and profile picture from Google.
- Photos you upload. Your browser resizes the photo before upload. We send it to our AI provider to create your video and do not keep a copy of the original photo on our servers.
- Generated content. An intermediate stage image, held temporarily by our AI provider, and your finished videos, which we store so you can watch and download them.
- Credits and payments. Your credit balance and history, and records of your purchases, such as the Stripe customer ID, amount, invoice and status. Card details are entered on Stripe's checkout page and are never sent to or stored by us.
- Technical data. Request logs, such as IP address, browser type, pages requested and errors, kept by our hosting provider for security and troubleshooting.
We do not use advertising trackers or third-party analytics on the Service.
How Photos Are Processed
To make a video, your photo is uploaded to APIMart, our AI generation provider. APIMart runs the image model, Google's Nano Banana, that places the person on stage, and the video model, ByteDance's Seedance, that creates the performance. According to APIMart, uploaded images are kept for up to 72 hours and generated files for 24 to 72 hours, after which they expire. We copy the finished video to our own storage.
We do not use your photos or videos to train AI models. We do not create facial recognition templates from your photos. We do not show your videos publicly or use them in advertising without your permission.
How We Use Your Data
We use your data to:
- create and deliver your videos;
- run your account, credits and purchases, and process refunds;
- send service emails, such as email verification, password resets and receipts;
- keep the Service secure, prevent fraud and abuse, and enforce our Terms;
- comply with legal obligations.
We do not sell your personal data.
Service Providers
We share data only with providers that help us run the Service:
| Provider | Purpose |
|---|---|
| Cloudflare | Hosting, database, file storage and logs |
| APIMart | AI image and video generation |
| Stripe | Payment processing |
| Resend | Sending account emails |
| Sign in with Google, if you choose it |
These providers may process data in the United States and other countries. Where required, transfers rely on safeguards such as standard contractual clauses.
Cookies and Local Storage
We use only what the Service needs to work:
- a login session cookie, which keeps you signed in;
- a language cookie,
PARAGLIDE_LOCALE, which remembers your language; - a sidebar cookie, which remembers whether the dashboard sidebar is open;
- local storage in your browser, which remembers your light or dark theme.
Data Retention
- Account data is kept while your account exists.
- Finished videos are kept in your account so you can download them later. Email us to delete specific videos or all of your videos and their files.
- Original photos are not stored by us. Copies held by our AI provider expire as described above.
- If you delete your account in Settings, we delete your account, credit history, purchase records and video records from our database. To have stored video files removed as well, email support@tinydesk.cc. Stripe keeps its own payment records as required by law.
- Hosting logs are kept for a limited period for security purposes.
Your Rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to withdraw consent. To make a request, email support@tinydesk.cc from your account email. You can also complain to your local data protection authority.
Children
The Service is for adults aged 18 and over. We do not knowingly collect data from children, and photos of minors are not allowed. If you believe a child's data has been submitted, contact us and we will delete it.
Security
We use encryption in transit, hashed passwords, access controls and reputable providers to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Changes to This Policy
We may update this Privacy Policy. If we make material changes, we will update the date at the top and, where appropriate, notify you by email or on the site.
Contact
Privacy questions or requests: support@tinydesk.cc