Privacy
Effective · 2026-11-03.
Seymour Industrial (Shanghai) Co., Ltd. operates Image Playground and handles the product account and support records described below. Privacy requests: [email protected].
Local work and optional uploads
Your image stays in your browser by default. We do not upload photos, filenames, EXIF, or thumbnails for the core playground.
Original files in a project backup can contain EXIF metadata, including location. Canvas-rendered image exports are re-encoded; a project backup preserves source files. Review what you include before downloading or uploading a backup. Shared recipes contain settings, not a copy of your photo.
Optional analytics are off until you choose to allow them. Account requests use your email and a secure session cookie separately from analytics. Billing is handled by the checkout provider; this site does not receive your full card details.
Optional usage analytics
If you opt in, we send event names, mode, plan category, fixed feature, error and interface experiment codes, event times and random browser/session identifiers to this site's collector. We never include photos, filenames, email, page URLs or error messages. Browser identifiers rotate after 90 days. Queued events expire after 24 hours and stored events are eligible for deletion after 90 days. IP addresses are used transiently for abuse limits; only a daily keyed hash is stored for those limits. Your browser privacy signal takes precedence. You can turn collection off here; this clears unsent events and the browser analytics identifier, but does not erase events already received or your local projects.
Optional collection is off.
Projects save in this browser (IndexedDB). Export a backup from Export or Settings. The backup is one JSON file that includes the project and its photo assets so import can restore the work. Clearing site data deletes local work.
Offline copy
After the first successful installation, this browser can reopen FLOW, TRACE and DUEL without a connection. Local image processing and standard downloads still work. Accounts, checkout and cloud services require a connection. The offline copy contains public app files, not uploaded photos or account responses. Updates activate after all open playground tabs close. Removing this copy leaves your saved projects in place; export a project backup before clearing browser site data.
The offline copy is being prepared. Keep this page open while connected.
Cloud backups are optional. Before saving, you must agree to send that snapshot's original photos (including any embedded metadata), thumbnails, edits and named versions to private account storage. No public image link is created. Later edits remain local until you save again. Queued copies are stored in this browser and sent only while signed in to the same account. Conflicts require your choice. Removing a cloud copy immediately removes access; its stored file is deleted by a retrying cleanup task. Replaced files are scheduled for cleanup after ten minutes. Losing Pro access does not automatically delete existing backups. You can download project files from Cloud backups and export the account manifest from Pro.
If you allow optional analytics, we record fixed source and campaign categories and an anonymous share-link token. No recipe settings, image, filename, search query or full referrer URL is included. When you create an account with this permission, those categories may be linked to the account for up to 90 days to measure verified registration and payment conversion. Account deletion removes that association. Turning analytics off stops future collection and clears this browser’s analytics identifiers; already collected records expire under the retention policy.
Cloudflare hosts this site and its private database and selected cloud backups. Paddle handles billing and required payment records; Resend delivers sign-in and transactional messages. Support sends only your typed message, optional reply address and selected technical details. Support requests expire after 90 days. Account deletion removes linked support and pending account messages; a deletion confirmation may keep its address temporarily for delivery. Other queued message content is cleared when the provider accepts it, or after seven days; minimal delivery status expires after 90 days. Provider acceptance does not guarantee inbox delivery. Essential service monitoring keeps aggregate endpoint categories, response status and duration for 90 days, without account IDs or request contents. Account creation does not subscribe you to marketing.
Use Pro to sign out, export account data or request account deletion. Account deletion does not erase projects stored locally in this browser. Required purchase records remain after account deletion.
This page does not claim GDPR, CCPA, COPPA, or FERPA compliance.
Google / Microsoft sign-in and optional email recovery
When enabled, Google sign-in sends your Google account identifier, verified email and basic authentication claims to our account service. We use them to create or recognize your account; we do not request your photos, contacts, Drive files or mailbox. Google receives the sign-in interaction under its own privacy policy. Your account export includes the linked Google identifier, and account deletion removes that link.
When Microsoft sign-in is enabled, we verify its signed tenant and stable account identifier and retain that identity with your account. We request only openid, profile and email, not access to your mailbox, files or calendar. A Microsoft email claim is contact information, not proof of ownership of an existing account. Existing accounts are linked only with their fresh authenticated proof. You can actively verify an address from that Microsoft session to enable email recovery; it cannot silently merge separate accounts. Account export and deletion include the Microsoft link.
\nA short-lived essential cookie binds each shortcut sign-in to this browser. Each sign-in challenge expires after five minutes and can be used once. Email sign-in links remain an optional recovery route. Choosing a purchase before sign-in preserves that choice and the accepted policy versions so checkout can open immediately afterward. Signing in alone does not create an order or start a trial.
Optional Pro trial
If you explicitly start a Pro trial, we retain its start and end dates and the terms version with your verified account until account deletion. This prevents an account from restarting its trial. A signed temporary grant is stored separately from projects and purchased licenses in your browser so local trial tools can work until the recorded deadline. Signing out removes the device grant; it does not reset the server dates. Your account export includes the trial record. No payment card is needed to start.
Why service data is used
Account identifiers, email and essential session cookies provide sign-in, requested storage, billing and support. Security limits use short-lived, rotating hashes of network addresses, not image content. Optional analytics rely on your choice above. Purchase records may need to be retained for accounting, legal duties or disputes. These purposes are separate; creating an account does not permit marketing.
Sign-in links expire after 15 minutes and server sessions after 30 days. Cloud originals remain until you delete the backup or account; queued physical deletion is retried if storage is unavailable. Support and operational statistics have the periods described above. Detached financial records follow the operator's approved retention schedule and applicable legal holds; that schedule must be confirmed before paid service opens.
Access, deletion and service providers
From your account, export account data, sign out or request deletion after fresh sign-in. Download cloud projects from Cloud backups. Account deletion clears this browser’s license and is separate from requesting a refund. Deletion removes service sessions and schedules cloud files for removal; it does not erase your browser's local projects or a payment provider's required records.
You can ask support to access, correct or delete personal data, limit or object to processing, or handle a request that the account tools cannot complete. We verify account ownership before disclosing data. Applicable privacy rights and complaint routes depend on your location; this notice does not limit them. See the European Commission's information for individuals for EU rights.
Security & providers lists the services used for hosting, storage, payments and email. They may process data in countries other than yours. We do not claim an EU-only storage region, a negotiated business DPA, or a compliance certification that has not been confirmed. Organizations needing contractual processing terms should contact support before uploading personal data.