Photo & account privacy

Account preview notice · October 26, 2026. Contact support@wipemedown.org for privacy and account requests.

Choosing a photo

Selecting a photo creates a preview in your browser. The online service does not currently upload or save it to your account. Removing the preview or closing the page removes that temporary browser preview.

Private saved photos

Private cloud saving is closed. The separate local development mode can normalize and save test images on the local machine; that mode is unavailable on the public domain. A storage and retention policy will be provided before online photo saving opens.

Local samples and AI providers

Local sample tasks use a pre-rendered template clip and do not animate your photo or send it to a paid AI provider. Real generation is closed. A final policy must identify the actual provider and its handling of source images before that processing is enabled.

Planned content safety

No production content-safety model or prompt scanner is active in this preview. Before video generation opens, the planned WAFFO Prompt Sift integration would send the generation prompt to WAFFO for a safety decision; image inputs and generated outputs require separate checks. We will update this notice with the actual processing and providers before those features open.

Accounts and necessary cookies

Account access is a limited preview and may not be available to every visitor. If you use an available sign-in method, Better Auth uses necessary session cookies to keep you signed in. Google sign-in requests only your basic profile and email; we store account identifiers, name, email, profile-image URL and session records in our dedicated Neon PostgreSQL database in AWS US East (Ohio). OAuth access and refresh tokens are encrypted by the application. Email-link sign-in uses Resend to deliver a single-use link, valid for five minutes, from support@wipemedown.org. Resend processes the recipient address and delivery metadata. IP addresses and request times support security and database-backed rate limiting.

Orders and payment

Local test orders do not collect money. The template includes Stripe and Creem adapters; actual checkout is closed. If enabled, payment details are entered with the payment provider. The application stores order, product, amount, status and credit records.

Third-party references

Native TikTok players connect your browser to TikTok when loaded. TikTok may receive your IP address, device/browser details and referrer, and use its own cookies. Your selected photo is not sent to TikTok by this app. Attribution and original-post links remain visible.

Retention and deletion

Account records are retained while the account remains active or until an ownership-verified deletion request is processed. Session records expire according to the authentication system; email sign-in tokens expire after five minutes. Automatic deletion and self-service full-account deletion are not available. Request deletion or a copy of your account information at support@wipemedown.org. Support messages are forwarded by Cloudflare Email Routing to the operator’s Gmail inbox, where correspondence is retained for handling your request. No online source-photo storage is open.

Microsoft Clarity

If you allow analytics, Microsoft Clarity records interactions on the homepage to help us understand how the site is used. The photo studio is marked for masking. We do not start Clarity on URLs with query parameters or on account pages. You can change your choice using Clarity choices on the homepage. Clarity may use cookies; Microsoft processes the resulting analytics data.

Analytics

We use Google Analytics 4 on public pages of wipemedown.org and www.wipemedown.org to understand visits and engagement. Google receives page views and browser/device information and may use analytics cookies. We remove query parameters and fragments from reported page URLs, reduce referrers to their origin, and do not send selected photos, form values, account IDs or task IDs. The tag respects browser Do Not Track and Global Privacy Control signals; local previews and account/admin pages are excluded. Advertising personalization and Google signals are disabled. Native TikTok players have their own processing as described above. Cloudflare hosts this preview and processes requests and hosting logs.