Privacy Policy

This Privacy Policy describes how image.cooking ("we", "us", or "the Service") handles information in connection with https://image.cooking and related applications, APIs, and communications.

Questions about this policy can be sent to privacyimagecooking.

This policy applies to information we process when you create an account, generate images, upload reference images, browse public pages, or contact us. It does not apply to third-party websites or model-provider properties that we do not control.

We collect only what we need to operate the Service, protect accounts, and meter Credits.

• Account data: email address, authentication identifiers, display name, and profile image if you sign in with a social provider.
• Creator content: prompts, generation settings, uploaded reference images, and generated images stored in your private library.
• Credits activity: balances, reservations, settlements, grants, and related timestamps needed to operate the ledger.
• Technical data: IP address, browser and device information, approximate location derived from IP, and diagnostic logs.
• Cookies and similar technologies required to keep you signed in and to protect the Service.

You can browse public pages without an account. Generation, private storage, and Credits require a signed-in account.

• Provide Create, My Creations, Account, and related product features.
• Send prompts, settings, and reference images to third-party AI model providers solely to fulfill your generation request.
• Authenticate sessions, prevent abuse, and investigate security incidents.
• Quote, reserve, settle, or return Credits according to the outcome of a generation.
• Communicate about the Service, including security notices and responses to your requests.
• Comply with law and enforce our Terms of Service.

We do not sell personal information. We do not use your private uploads or generated images to train public marketing models of our own.

To generate an image we transmit the minimum payload required by the selected model. That payload typically includes your prompt, generation settings, and any reference images you attach. Providers process that payload under their own terms and privacy notices.

We do not ask you to send provider credentials. Provider responses are stored as private outputs in your account when generation succeeds.

We share information with service providers that help us operate the Service, including authentication and database hosting, application hosting, content delivery, object storage, email delivery, and AI generation. Those providers may process data in the United States and other countries where they maintain infrastructure.

We may disclose information if required by law, to protect the Service or other users, or in connection with a merger, acquisition, or asset transfer, subject to appropriate confidentiality.

Your generations are private by default. We publish an image only after you submit it and we review it. You may download outputs you own, and you may withdraw a submission.

• Account records remain while your account is open.
• Unused reference uploads may be removed automatically after a short retention window.
• When you delete a creation from My Creations, we remove it from your library and delete associated output files from storage when technically available. Related generation records may be retained in a non-public form for audit, fraud prevention, and Credits integrity.
• Credits ledgers are financial records. We retain them as needed to operate balances and meet legal obligations. Deleting a creation does not erase a completed Credits charge.
• Security and server logs are kept for a limited period unless a longer period is required for an investigation.

To request account closure or a copy of your information, email privacyimagecooking from the address on the account.

We use essential cookies and similar storage to keep you signed in, protect forms, and enforce session security. These are required for the Service to function. We do not use third-party advertising cookies on product pages.

We use access controls, encrypted transport, private object storage, and server-side authorization so that one account cannot read another account's library. No method of transmission or storage is perfectly secure. You are responsible for keeping access to your email and sign-in methods confidential.

Depending on where you live, you may have rights to access, correct, delete, or export personal information, to object to or restrict certain processing, and to appeal a denial. We will not discriminate against you for exercising those rights.

Send requests to privacyimagecooking. We may need to verify that the request comes from the account holder. If a processor holds the data, we will pass the request through where we are required to do so.

The Service is not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe we have done so, contact us and we will delete the information.

The Service is operated from the United States. If you access it from another country, you understand that your information may be processed in the United States and in other locations where our providers operate.

We may update this policy as the Service changes. The effective date at the top of this page will change when we do. Continued use after an update means you accept the revised policy. Material changes will be highlighted on this page.