Privacy Policy

Safety processing

Uploaded photos are checked by OpenAI omni-moderation-latest. Photos go to Kie.ai for Wan 3.0 generation; the completed video and audio go to Kie.ai for Gemini 3.8 Flash safety review. Authorized administrators may inspect held outputs. Safety decisions and model results are retained for 180 days; database backups may retain them for another 30 days. Undelivered videos remain private.

What we collect

Guest purchases use a private browser session to connect your photo, order and video. Your checkout email is stored with the order and supplied to the payment provider for the receipt; it does not create or link a Google account. If you choose to sign in, we receive your name, email and profile picture from Google. Payment details are handled by our payment partner; Window Peeper never sees your card number.

How we use it

Your photo is used to render the video you request. Guests check generation status on their order page; payment receipts are sent by the payment provider. Registered-account emails are used for service notices and support, while report emails are used to communicate the review outcome. We do not send marketing email, sell personal data or use your photos to train models.

Storage and retention

Files are stored with our infrastructure provider in encrypted form. Uploaded photos are deleted automatically 7 days after upload and generated videos are kept for 30 days after they finish, unless you delete them or your account sooner. Order and payment records are kept as required for tax and accounting. When you delete your account we keep only a one-way hash of your email address, so the same email cannot claim the sign-up bonus twice.

Safety checks

Before a photo is used it may be checked by an automated content-safety classifier. The check runs only to enforce our rules, and its result is not used for anything else. Public forms are protected by a bot-detection service that may process your IP address and browser signals.

Cookies and analytics

The site uses necessary cookies and browser storage for your private guest or sign-in session, saved order information, and display preferences. A saved guest order link works only with its original browser session. Clearing site data or using a different browser can remove access; contact support with your order ID if this happens.

We also set a first-party cookie (vt_attr, kept for 90 days) that records how you first and most recently reached us, such as a referring website or campaign link. We use it only to see which channels lead to sign-ups and purchases, and we do not share it with advertising networks. It is only set after you accept analytics cookies in the banner, and withdrawing consent deletes it.

With your consent, Microsoft Clarity uses _clck and _clsk cookies to measure clicks, scrolling and masked session replays on public pages. Replay stops before photos are displayed and excludes checkout, account and admin pages. Visits with query strings or saved photo drafts are excluded from replay. We do not send email addresses, photos or video files to Clarity. Withdraw consent in Cookie settings to stop replay and delete these cookies. Microsoft processes usage and device data for this service: https://privacy.microsoft.com/privacystatement.

We count page views with Cloudflare Web Analytics, which does not use cookies or track you across websites.

If you accept analytics cookies in the banner, we also use Google Analytics. It sets cookies (such as _ga) and lets Google process your IP address and device information to produce usage reports for us. Google Analytics is not loaded until you accept. You can withdraw consent at any time under “Cookie settings” in the footer, which also deletes these cookies.

Shared videos

If you share a video, anyone with the link can watch it. The share page does not show your name or email and asks search engines not to index it. To make link previews, your browser takes a still frame from the video and we store it with the video. Stopping sharing or deleting the video disables the link and deletes that image; the link also stops working when the video expires or is removed after a report.

Service providers

We rely on a small number of processors: cloud hosting, storage and email delivery, an AI rendering provider that processes your photo only for your request, a content-safety classifier, our payment provider, and the analytics services described above.

Your rights

You can download or delete your videos at any time. In Settings you can export a copy of your data as JSON or delete your account. For any other privacy request, email support@windowpeeper.video.