Last updated 18 August 2026.
Not a legal document. This is the plain-language companion to the privacy policy, for anyone who would rather know what actually happens than what is legally sufficient to say. Where the two differ, the privacy policy is the one that governs.
You type a description and press the button
Your description goes to our server. It is checked against a short word list and, if it passes, sent to fal.ai together with the settings you chose: the shape of the picture, the look, the speed.
Your email address is not sent. Your user name is not sent. fal.ai receives a description from an account they know nothing about.
The description is stored here, attached to the job, so that later you can see which request produced which picture.
You upload a picture instead
PHP receives the file and holds it as a temporary file for the length of that one request. We read it, decode it, and write it out again as a fresh JPEG.
That re-encoding is not only about file size. A photograph from a phone carries a block of hidden data: the camera model, the exact second, often the GPS position of where you stood. Writing a new file leaves all of it behind. What we send is the pixels and nothing else.
Nothing of ours copies your upload anywhere. It does not go into the media library, it is not saved beside the result, and it is not in a backup. The temporary file goes when the request ends. Only the result comes back and is kept.
Uploads must be JPEG, PNG or WebP and under 10 MB. The type is decided by looking at the bytes rather than by trusting what the browser called the file.
The generation happens
fal.ai does the work. This site has no models of its own and does no computation of that kind: it asks, it waits, it collects.
By that point your credits are already spent: the charge happens before the request goes out, because ten simultaneous presses would otherwise all pass a balance check that only one of them could afford. If the generation fails, the credits come straight back.
The result comes back
We download the finished file to our own server and put it in our own media library, under your account. It is served from this domain, not from theirs. If fal.ai deleted everything they hold tomorrow, what is here would be unaffected.
The address fal.ai gives us for a result expires. That is one reason we keep our own copy rather than pointing you at theirs.
It stays until you delete it
There is no timer. Your results are listed on your account, each with a Delete button, and deleting removes the file for good.
We say this precisely because many sites do not: nothing on this site deletes your files automatically. WordPress runs its own housekeeping on a schedule (checking for updates, clearing expired temporary values) and none of it touches your pictures. If you want them gone, the button is there, or write to us and we will.
What is written down about you, in full
- your email address and user name;
- a one-way hash of your password, which cannot be turned back into the password;
- every generation: the tool, the description, the settings, the time, and whether it worked;
- every credit added and every credit spent, each with a reason;
- the pictures and clips you made;
- anything you sent us through the contact form.
That is the whole list. There is no field on this site for a real name, a postal address, a phone number or a date of birth.
One thing is recorded that is not in that list and is not ours: our hosting company keeps a server log of every request, including the address you connect from. The privacy policy says what is in it and why.
If you want it all gone
Delete the pictures with the buttons, then write to us through the contact page and choose “My data”. The account, the job history and the credit record go together. The answer comes within a month, which is the limit the law sets rather than the time we intend to take.