Privacy policy

Last updated: August 30, 2026

This policy explains how chunyu lin (“we”, “us”) handles personal data when you use Object Remover.

Where Clarity is enabled, with your analytics consent we associate signed-in visits on approved public pages with a site-prefixed internal account ID to understand visits across devices. Clarity hashes this identifier before transmission. We do not supply your email or name through this feature. Signing out or switching accounts ends the current recording and clears Clarity cookies. Private pages remain excluded. You can withdraw analytics consent in Cookie preferences.

Information we collect

Account data. Google sign-in provides your Google account identifier, name, email address, and profile image. We store these so you can access your account and history.

Product data. We store optional descriptions and other submitted text, generation settings, model choices, status, credit usage, and result links. Do not submit sensitive personal information in descriptions or reference media.

Temporary browser drafts and request recovery. The prepared photo, painted selection, optional description, editing settings and duplicate-safe request identifier can be stored in this browser for up to 24 hours, including before sign-in. Reloading or signing in can restore this draft. Expired drafts are removed when the editor next checks storage. Use “Discard draft” or clear site storage to delete it sooner. Clicking Remove uploads the prepared photo and mask to our storage and AI processing provider. Stored media uses unguessable links that anyone with the exact link may access; do not upload confidential or sensitive images.

Billing data. Stripe processes payment details. We receive customer, subscription, invoice, payment-status, country, tax, and transaction identifiers, but not full card numbers.

Technical and analytics data. Essential logs may include IP address, browser details, timestamps, security events, and errors. If you consent, Google Analytics 4 and Microsoft Clarity may collect page use, interaction, device, and session data. Clarity may provide privacy-filtered session replay and heatmaps.

How and why we use data

We use data to provide and secure accounts, process generation and payments, maintain credit balances, prevent abuse, troubleshoot failures, support customers, measure product performance, and meet legal or tax obligations. Where applicable, our legal bases include performing our contract, legitimate interests in security and service improvement, consent for optional analytics, and compliance with law.

Processing partners and international transfers

We share only what is needed with Google for authentication and optional analytics, Stripe for billing, Microsoft for optional Clarity analytics, and the hosting, database, and generation-processing partners needed to operate the service. These partners may process data in other countries under their terms and legally recognized transfer safeguards.

Retention

Account and product records are kept while your account is active. Generation result links can expire under storage rules. Security logs are normally kept only as long as operationally needed. Billing and tax records may be retained for the period required by law. After a valid deletion request, we delete or anonymize data that is not legally required.

Cookies and controls

Essential cookies maintain your secure session and choices. A random first-party browser identifier counts visits to public pages and generate-button clicks without prompt text or uploaded content. Optional analytics starts only after “Allow analytics”. Google Analytics receives approved public-page events; Clarity is limited to masked pricing and static information pages, never the image editor or private account, sign-in or admin pages. Neither provider loads on pages with URL queries or fragments. Use “Reset choice” in the cookie policy to withdraw consent; the page reloads to stop loaded providers without signing you out.

Your rights

Depending on where you live, you may request access, correction, deletion, portability, restriction, or objection, and may withdraw analytics consent. You can submit deletion from the account page or email [email protected]. We may need to verify your identity. You may also complain to your local data-protection authority.

Children

The service is not directed to children under 13, and users must be old enough to enter a binding contract in their jurisdiction.

Security and changes

We use access controls, secured session cookies, server-side credentials, signed Stripe webhooks, and encrypted transport. No system is completely secure. Material policy changes will be posted here with a new effective date.

Contact

Data controller: chunyu lin, Champion Tower, Three Garden Road Central, Hong Kong. Privacy questions: [email protected].

Welcome-credit abuse prevention

To prevent repeated welcome-credit claims, an essential first-party browser cookie lasts up to one year. Our server stores a hashed random browser identifier to limit the welcome offer to once per browser per site. This does not use Google Analytics, track you across sites, or change existing balances or daily check-in rewards. Shared-browser users can still register and use their accounts; contact support if you believe an offer was withheld in error.