Privacy Policy

1. Photographs and videos

Opening a photograph and generating or exporting an animation take place in your browser. These actions do not upload the photograph or video to our servers. Download results you want to keep before closing the editor.

When you generate, we receive a digital fingerprint of the photograph, animation settings and dimensions. This lets us recognise authorised generations and retries. The fingerprint is not the image, but is usage data linked to your account or guest record.

Optional social submissions are different. Only if you complete “Share with Astro Reveal” and tick its separate permission do we receive the finished MP4 video, chosen public credit, optional caption and contact email. The submitted MP4 is created in your browser and does not copy the source file’s camera or location metadata. It retains the free watermark where applicable. We store your permission wording, time and submission reference to record what you agreed to.

We review submissions before sharing. Your credit, caption and video can be public if selected; your contact email is not included in the post. Submission is optional and does not affect your plan. Withdraw through the submission control or contact us with your reference. We stop future use and remove posts we control as soon as reasonably practicable; third-party shares may remain.

2. Account and usage information

When you sign in, the authentication service supplies a verified account identifier, email address and display name. We use these to identify you and display your account. We do not receive your authentication provider’s password.

Our database stores account and guest identifiers, creation dates, plan settings, generation allowances, photo fingerprints, animation settings, generation times and completion status. Guests use a random identifier without registering an account.

If you save a Premium preset, we store its name, reveal mode, timing and slider settings with your account so you can use it wherever you sign in. No photograph or video is included in a preset. You can rename, update or delete presets in My Account.

For a paid subscription, billing information can include the billing contact, region, currency, payment reference, amount, renewal date and subscription status. Payment providers handle payment credentials under their own notices. We do not ask you to send full card details to us.

Hosting and sign-in providers process connection information such as IP addresses, browser information and security logs. Our generation-allowance records do not contain your IP address.

If you contact us, we receive the contact details and information you choose to send. Please do not include passwords or unnecessary sensitive information.

3. Why information is used

• Providing the tool and subscription: identifying your account, managing access, processing billing and tracking generations. Our lawful basis is performance of our contract or steps you request before entering it.
• Security and fair access: preventing misuse, enforcing allowances and diagnosing faults. Our basis is our legitimate interests in a secure, reliable service, balanced against your rights.
• Support: responding to questions and resolving problems, based on our contract or legitimate interests in helping customers.
• Legal records: keeping records required by tax or other law, based on legal obligations.
• Social features: reviewing and featuring the video and credit you voluntarily submit, based on your separate consent. You may withdraw at any time. We keep a limited permission record where needed to demonstrate compliance or resolve a claim, based on our legitimate interests and applicable legal obligations.

We do not add you to a marketing mailing list when you submit a video. With your permission, we use Google Analytics to understand visits to public pages, referral websites, verified signups, completed reveals and starts of Premium checkout. The lawful basis for this optional analytics is your consent. We do not use Google advertising personalisation or Google signals.

4. Cookies and browser storage

An essential guest-session cookie lets the tool recognise guest allowances and authorised use. Its configured lifetime is up to one year. Hosting and sign-in services also use session and security mechanisms needed to provide the service.

Optional Google Analytics is off until you choose “Accept analytics”. Rejecting analytics does not affect the tool, your account or your subscription. Use Cookie settings to change your choice or withdraw consent at any time. Withdrawal stops future analytics and removes our Google Analytics cookies from this browser; it does not undo information already sent. Your photograph stays open in the editor.

We remember your cookie choice in browser storage for 180 days. If accepted, Google Analytics uses the _ga and _ga_G57FQY8D9D cookies to distinguish browsers and sessions, with a configured lifetime of up to 180 days. A consented signup verification may also be held as a timestamp in temporary session storage and reported when you next visit a public page within 30 minutes. It contains no account identifier.

Analytics receives fixed public page addresses and titles, the referring website’s origin without its path or query, and limited event details such as reveal mode, account tier, checkout currency and billing period. We do not send photographs, videos, filenames, photo fingerprints, names, email addresses, form contents, account identifiers, payment references or address query strings. Analytics is not loaded on sign-in, account or admin pages, or on staging and local previews. Google also processes technical connection and device information needed to provide analytics. Blocking necessary storage may prevent account and allowance features from working.

5. Service providers and sharing

We use Cloudflare to deliver the website and provide account-data storage and private storage for voluntarily submitted videos and earlier image submissions. Supabase provides account sign-in. Resend sends account emails and admin notifications, including deletion requests, new social submissions and withdrawn sharing permission. Admin notifications contain the details needed to review the request; videos and photographs are not attached. Microsoft hosts our support mailbox. Access to submissions in our application is restricted to the submitting account or guest session and authorised Astro Reveal staff.

Payment providers offered at checkout process payment information. Support email providers process messages you send us. When we feature a video with your permission, the social platform receives the video, caption and public credit; that platform’s privacy notice also applies to its processing and to other people’s interactions with the post.

If you accept analytics, Google provides the analytics service and processes the limited usage and device information described above. See Google’s privacy policy for how Google handles information.

We do not sell your account or usage data. We may disclose information where the law requires it or where reasonably necessary to investigate misuse or protect legal rights.

Providers may process information outside the UK. Where an international transfer requires safeguards, we use the applicable legal transfer mechanism, such as an adequacy decision or approved contractual safeguards. Contact us for information about the safeguards relevant to your data.

6. How long information is kept

Ordinary editor photographs and videos are not retained on our servers. Downloads remain under your control on your device.

We keep anonymous daily signup and completed-generation totals to understand use of the service. These counts contain no account identifiers and remain after an account is deleted. Our payment reporting keeps invoice references, currencies, paid amounts and payment dates; it does not store card details.

We retain account and generation records while needed to provide your account, track allowances and authorised retries, resolve support issues or investigate misuse. When an account is closed, we delete or anonymise information no longer needed; records required for tax, disputes or legal obligations are kept for the applicable period. We assess retention by the purpose of the record and the relevant legal requirements rather than keeping every record indefinitely.

Your last-used reveal mode, timing and slider values are saved to your account so they can be restored when you sign in. Reset to defaults replaces these remembered values. These records contain settings, not photographs or videos, and are removed when your account is deleted. A temporary settings copy in your browser carries controls through signup. Saved presets remain with your account until you delete them or close your account. A Free account can use its first saved preset with the free modes. Additional presets and Premium modes are locked after a downgrade, without deleting the saved settings.

Social submissions are kept while awaiting review or while we have permission to feature them. You can withdraw a submission; this deletes our stored submission and flags any published use for removal. We keep a limited record of the permission and withdrawal where needed to demonstrate compliance or resolve a claim. Rejected submissions are deleted from the review queue and private media storage.

When an account is deleted, we retain a minimal deletion receipt and a hashed identity reference to prevent old sessions recreating it; this does not include the customer’s name, email or photographs. Support messages are kept for as long as needed to resolve the enquiry and related disputes. Necessary copies may remain in provider backups until those backups expire. Contact us about deletion or the retention applicable to a particular record.

7. Your privacy rights

Depending on the circumstances, you may ask to access, correct or erase personal data, restrict its use, object to processing based on legitimate interests, or receive portable data. You can withdraw consent without affecting earlier lawful processing.

We may need proportionate information to verify a request. We normally respond within one month, subject to lawful extensions. Some records may need to be retained for legal obligations or disputes; we explain any applicable exception.

The generation system automatically checks your allowance. We do not use automated decision-making intended to have legal or similarly significant effects on you. Contact us if you believe an allowance or access decision is incorrect.

You can complain to the UK Information Commissioner’s Office (ICO) or your applicable local data-protection authority. You do not have to contact us first.

8. Controller, contact and updates

Astro Reveal Ltd is the controller responsible for the personal information described in this policy. Send privacy questions or requests to:

We will update this notice when the way the service uses information changes and highlight material changes. The date at the top identifies this version.