Privacy Policy

Scope

This policy applies to stormiiai.app, including the public homepage and any account, payment, or video features when those features are enabled.

Information we handle

When Google sign-in is enabled, we receive an account identifier, name, email, and profile image (avatar), and maintain authentication records needed for login sessions and the account UI. We do not request Gmail or Google Drive permissions, and we do not offer email/password signup.
Google sign-in may be available before payment. Video generation is available separately for authenticated accounts with paid credits; generation requests include the line and direction choices you submit, and the selected AI video provider processes the request to produce the requested 8-second vertical clip.
When payment or video features are enabled, we store job status, credit reservations, payment or order references, and private video metadata. We do not store full payment card numbers.
Cloudflare hosting and storage support the service, including account and job records and private video objects. Finished videos are private, owner-scoped objects and, when video generation is enabled, are retained for 90 days from processing completion unless you delete them sooner. Deleting a video revokes the application record before object cleanup.
When payment is enabled, Waffo processes checkout and payment details. stormiiai receives payment and order references needed to grant, expire, or revoke credits.

We use this information to authenticate you, maintain login sessions and the account UI, submit and recover generation jobs when enabled, account for paid credits when enabled, deliver private videos, prevent abuse, and operate and secure the service. When generation is enabled, the selected AI provider's handling of submitted content is governed by that provider's terms; we send the content needed to process the approved request.

Third-party services

The enabled product may use Google authentication, Waffo payments, Cloudflare hosting and storage, and an AI video provider. Each service receives only the information needed for its stated operation. Google authentication does not give us Gmail or Google Drive access. Provider requests are made by the server and provider URLs are not exposed as public media links.

Microsoft Clarity on the public homepage

On the production public homepage, including supported locale versions of the homepage, we use Microsoft Clarity to understand page performance, interaction patterns, and which parts of the tool need improvement. Clarity is not loaded on authentication, dashboard, settings, admin, API, payment, private video, or legal pages. The generator area is explicitly masked, and we do not send your name, email address, account identifier, submitted line, direction choices, image, video URL, or authentication token to Clarity as an identifier or event.

Without a separate consent manager, the site initializes Clarity Consent V2 with both ad_Storage and analytics_Storage set to denied. This enables Clarity's limited cookieless measurement mode; it does not mean that no technical measurement can occur. We do not use Clarity for advertising or sell browsing data. A browser Do Not Track or Global Privacy Control signal prevents Clarity from loading, and leaving the public homepage stops the SDK before private pages are shown. You can also block third-party scripts or clear browser storage through your browser settings.

Clarity is provided by Microsoft. See Microsoft's Privacy Statement for information about Microsoft's handling of Clarity data.

Retention and deletion

When private video features are enabled, you can delete a finished video from My videos. To request account deletion, contact support@rumplestiltskin.app. Account, payment, credit, and security records may be retained for accounting, fraud prevention, dispute handling, and legal obligations. Browser drafts remain on your device until you clear site storage.

Changes and contact