Privacy

This service handles a photo of your bathroom. It is the most sensitive thing it touches, and it is designed to get rid of it as fast as possible.

What is collected

• The photo of the mirror you take or upload.
• The first name you type, and nothing else about that person.
• The site language, so the video is made in the right one.
• Your device’s time zone, so the date shown in the video is right.
• Your payment session identifier, returned by Stripe.

There is no account, no sign-up and no password. We do not ask for your name, your email address or your phone number. We ask nothing about the person you send the video to, beyond their first name.

For how long

• The mirror photo is deleted as soon as the video is made. If the generation fails, or if you abandon the payment, it is deleted automatically within 24 hours at the latest.
• The intermediate files produced by the AI are deleted as soon as the final video is ready, and within 24 hours at the latest.
• The final video and the first name are kept for 30 days, so that the link you send still works the next day. After that, everything is erased.
• Technical tracking of a generation in progress lives for 6 hours.

These deletions are automatic: a scheduled task runs every day and erases whatever is past its term.

Who else sees this data

• fal.ai, in the United States, receives the photo and the first name: that service generates the image and the video. Without it the product does not exist.
• Vercel Inc., in the United States, hosts the site and stores the files.
• Upstash stores the orders, meaning the first name and the progress state.
• Stripe processes the payment.

Files are kept in private storage: no public address reaches your photo, not even an unguessable one. Everything goes through the server, which alone holds the key.

No card details pass through or are stored on our servers. The payment form is provided by Stripe and shown in a secure frame on the page: what you type there goes straight to Stripe.

No trackers

The site itself sets no cookies. Only Stripe’s payment form, loaded when you pay and never before, sets its own fraud-prevention cookies, which the payment requires. The site counts its visits with Vercel Web Analytics, without cookies and without being able to recognize you from one day to the next: country, device type, the site you came from, and which steps of the journey you reached (for example “photo taken”), without your name or your photo. It uses no advertising network and no social buttons that would follow you. That is why you see no consent banner: cookies strictly necessary for a service you ask for do not require one.

The site does keep a few things in your browser’s memory, strictly to work: the language you chose, the order in progress, the generation in progress, the deadline shown, and the link to the last video delivered. They never leave your device and disappear if you clear the site’s data.

Your rights

You can ask to access your data, to correct it, or to have it deleted immediately rather than waiting for the periods above. Write to the address given in the legal notice, quoting your video link if you still have it.

The site also has a button that erases everything it has kept in your browser.

Age

The service is for people aged 18 and over. It is not intended for children and we do not knowingly collect any data about them.