Draft: this document still contains incomplete service information and is being finalized.
Privacy Policy
Effective date: {effectiveDate}
This policy explains how {operatorName}, the operator of Tattoo Studio at https://tattoo.pdfmergeapp.com, handles information when you use the tattoo idea generator or contact us.
Contact: {supportEmail}
Operator location: {operatorCountry}
Contact address: {operatorContactAddress}
Information we process
Design requests. We process the description you enter, selected style and placement, generated image, artist brief, and information needed to manage the request, such as its task ID, status and timestamps. Avoid including sensitive personal information or information about other people that is unnecessary for your design.
Browser session. We use a signed browser cookie to associate requests and recent designs with your browser. The cookie is intended to last for 30 days, subject to your browser settings. It does not create an account or provide access across browsers.
Security and technical information. Hosting and verification services process information such as IP addresses, browser information and request details. Our application uses a daily coded network identifier for request limits rather than storing a raw IP address in its daily quota records. This does not prevent our infrastructure or verification provider from processing IP addresses.
Service events. We record operational events such as request acceptance, completion, failure and download requests to measure reliability, manage costs and investigate problems. These event records are designed not to contain your original design description or image.
Support messages. If you email us, we receive your email address and any message or files you choose to send.
Why we use this information
We use information to generate and deliver designs, provide temporary history, apply free limits, prevent abuse, investigate errors, respond to requests and maintain the service.
We do not automatically publish your private descriptions or generated images in the public gallery. We do not sell your personal information, use your private designs for advertising, or use them to train our own models. The image provider's handling of submitted content is described below.
Providers that help operate the service
Hosting and storage. The application runs on infrastructure provided by {hostingProviderName}, managed using Coolify. Application and database processing locations: {infrastructureLocations}. See the hosting provider's privacy information. We use Cloudflare for domain services and, where configured, traffic protection and private image storage. See Cloudflare's Privacy Policy.
Abuse verification. We use Cloudflare Turnstile to help distinguish legitimate requests from automated abuse. It processes browser and connection signals, including IP addresses and browser information. See the Cloudflare Turnstile Privacy Addendum.
Image generation. We send the design description and relevant generation settings to {imageProviderName} so it can create the image. We do not include your session cookie or support email address in the image prompt. Processing locations: {imageProcessingLocations}. Provider retention: {imageProviderRetention}. Provider use of content for training: {imageProviderTrainingUse}. See the image provider's privacy information.
Email support. Support correspondence is handled through {supportProviderName}. See the email provider's privacy information.
Providers receive information needed for their role. Their own policies and applicable agreements may also govern their processing. Information may be handled outside your country. Relevant international processing arrangements: {internationalTransferDetails}.
Cookies and analytics
The session cookie supports private history and request limits. Security features also process information needed to protect the service. Blocking this site's cookies may prevent generation or access to recent designs.
Optional analytics are currently disabled. We do not load Google Analytics 4 or set optional analytics cookies in the current service. If analytics are introduced later, this policy and the available controls must be updated before they are enabled. Analytics will not be required to use the generator.
Storage and retention
| Information | Retention |
|---|---|
| Completed designs, associated descriptions and briefs | Access ends three days after completion, or earlier when you delete the design. Content is then scheduled for physical cleanup. |
| Browser session cookie | Up to 30 days, unless removed earlier by your browser or by you. |
| Pending, failed or uncertain task records | {activeJobRetention} |
| Daily network and quota records | {networkRecordRetention} |
| Operational and security logs | {operationalLogRetention} |
| Support correspondence | {supportRetention} |
| Cost and accounting records without design content | {billingRetention} |
| Backups and recovery copies | {backupRetention} |
Deletion removes access through our application before background cleanup completes. Cleanup may be retried if storage is temporarily unavailable. Provider copies follow the provider retention arrangements above; deleting a result here does not promise immediate deletion of every provider or backup copy.
We may retain limited records where needed to meet an applicable legal obligation or resolve a specific security incident. Aggregated statistics that no longer identify a person or design may be retained separately.
Your choices and requests
Download any design you want to keep before it expires. You can delete completed designs in Recent designs. Clearing the browser cookie removes your access to that history; it does not by itself request immediate deletion of stored files.
For access, correction, deletion or other privacy requests, contact {supportEmail}. Depending on where you live, you may have additional rights, including objection, restriction, portability or a complaint to a relevant authority. We will handle requests under the rules that apply to you.
We may ask for limited information to locate a record and verify your request. We do not ask you to send your browser cookie. Without an account or identifying task information, we may not be able to connect you to a particular record.
{privacyJurisdictionDetails}
Security
Access to private designs is checked against the browser session and the design's availability. We use access controls and other safeguards, but no online service can promise complete security. Anyone with access to your browser may also be able to access its recent designs.
Children
This service is intended for adults aged 18 or over. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.
Changes to this policy
We may update this policy as the service changes. The effective date identifies the version in force. Where applicable rules require additional notice or a choice before a change takes effect, we will provide it.