What we collect
Your two photos and the role you assign to each, your chosen resolution, your order email, payment status from the payment provider (not your card details) and, once made, the generated video. Photos are uploaded when you continue to checkout and stored privately; they are not public.
Why
To make your video, take payment, deliver the file, let you find your order with your email, answer support requests and prevent misuse.
Who processes it
Waffo (Waffo Pancake) runs checkout and receives your email and payment details as the merchant of record; we never see your card number. Cloudflare hosts the site and privately stores order records, photos and videos. Google Analytics and Microsoft Clarity receive public-page analytics only if you accept them. Before generation, Waffo’s content-safety service receives the generation prompt text only (no photos or personal data) to check it. When generation is switched on, fal (image preparation and trimming) and RunningHub (video generation) receive the photos or references needed for your video, as described on the AI disclosure page. Each receives only what it needs.
How long
Photos and videos are deleted 7 days after the order. Order records needed for accounting or disputes may be kept longer, without the photos.
Finding orders by email
Order lookup uses only the order email; no account or verification code is required. Anyone who knows that email could see its order summaries, so use an address you control.
Cookies and analytics
There is no advertising. Optional analytics loads only if you choose Accept on the privacy card, which appears about five seconds after you first arrive on a public page. Accept turns on Google Analytics (public page path and title, without query strings or referrers; Google signals and ad personalization off) and Microsoft Clarity (masked page interactions on public pages). Reject keeps both off. Photo selection, order lookup, order and download pages never load analytics, and analytics stops as soon as you add a photo. Clarity may set _clck (about one year) and _clsk (about one day) and Google Analytics may set _ga cookies after you accept; Microsoft and Google process that data under their own privacy statements. We never link analytics to your email or order.
Your privacy choice
Your choice is kept for 180 days in localStorage (ilts-analytics-v1). If you reject, a necessary ilts_analytics_denied cookie and session value keep analytics off, even if other storage fails. Change or withdraw your choice anytime with Privacy / cookie settings in the footer. Withdrawing stops future collection and removes the analytics cookies we can reach; it does not delete data already sent to the providers.
Browser storage
Your browser also stores your last entered email and recent order access codes locally so you can reopen your orders; you can clear them in your browser settings.
Your rights
You can ask for a copy of your data or for it to be deleted by emailing luhuairong7@gmail.com from your order email.