Privacy Policy

Last updated: October 14, 2026

ColdStone co. operates Rumpelstiltskin AI. This policy describes the information used for visitor sessions and photo-to-video generation.

Information used by the service

The service creates an anonymous session with a generated internal identifier to associate uploads and video tasks with your browser. Registration, a name, an email address and a password are not required. Session records can include your IP address and browser information.

When you generate a video, the service processes the photos you select, the prepared generation instructions, job status and a link to the resulting video. Support emails contain the information you choose to send us.

Why we use this information

Visitor sessions protect access to uploads and video tasks. Internal credit records track generation usage and failure recovery. Uploaded photos and generation instructions are needed to create your requested video. Technical logs help diagnose errors and protect the service from misuse.

We use information sent to the support address to respond to your request. Avoid including passwords, API keys or unnecessary personal information in your message.

Storage and video processing

Cloudflare provides the application hosting, D1 visitor and task database, and R2 photo storage. AutoDL receives the reference-image URLs and generation instructions to run the video workflow. These providers process data on their own infrastructure and may process it outside your country.

Uploaded reference photos currently use public storage URLs so the video provider can retrieve them. Anyone who has such a URL can access the image. Do not upload confidential documents or images you need to keep private. A local preview alone does not upload a photo; the upload begins when you start generation.

Retention and deletion requests

There is currently no automatic deletion schedule for uploaded photos. Visitor, task and internal credit records remain until removed through administration or a supported deletion process. Earlier account records, if any, also remain until deletion is requested. Generated-video links supplied by the provider can expire, so download the result while it is available.

To request access, correction or deletion, email us and describe the records or uploads involved. Include the approximate generation time and any task or image URL you retained. We may need information to verify the request. Deleting an application record does not necessarily remove provider-retained copies.

Cookies and analytics

The service uses a signed, HttpOnly visitor cookie for session continuity and misuse prevention. This cookie can last up to one year. We also use short-lived, keyed hashes of Cloudflare-provided IP addresses to limit request bursts; the trial rate counters do not store raw IP addresses.

The authentication system uses session cookies, and the interface may store your theme preference in the browser. The current tab also keeps your latest video task ID for up to 24 hours; photos are not stored in this browser record. The application currently has no active analytics identifier and does not load an analytics beacon by default.

If we enable an analytics service or change how personal information is processed, we will update this policy to describe that change.

Contact

For support, privacy requests or questions about these terms, email zw83716@gmail.com. ColdStone co.