Privacy Policy
STENGEN is a tool that lets you upload images and generate tattoo stencil previews using AI. This policy describes how we collect, use, and protect your information.
Information we collect
When you sign up we store your email, your name if you give one, your sign-in identifiers (password hash, or Google / Apple account ID if you use those buttons), your language, your plan and credit balance, and the platform you use (web, iOS or Android).
Photos you upload to the Stencil Extractor, the prompts you write in the Tattoo Generator and any reference images are sent to our servers and to the AI provider that produces the result. The designs and stencils you generate are stored in your history so you can download them again.
If you publish a design, heart a design or report one, we store that action with your account. Published designs are public and shown as “Artist”, never with your name or email. Hearts and reports are not public.
We log requests (IP address, time, browser or app version) for security and to keep the service running, and we collect anonymous usage statistics with Google Analytics. When we run ads, the Meta Pixel records site events such as sign-ups and purchases. If you enable push notifications in the app, we store a device token so we can deliver them.
Payments on the website are processed by Stripe; purchases in the app by Apple or Google. We never see or store your full card number. We keep records of what you bought for accounting and to manage your plan.
How we use your information
We use your data to run the service (accounts, credits, generations, the Explore feed), to prevent abuse and fraud, to answer support requests, to send service emails (verification, receipts, credits running out, product news you can opt out of) and to understand how the product is used so we can improve it. The legal bases are the contract with you, our legitimate interest in running a secure service, your consent where we ask for it (for example push notifications and marketing emails), and legal obligations such as tax records.
Third-party services
We work with a small number of providers who process data on our behalf: AI image providers for generations and stencils (for example Replicate, Krea, OpenAI and Google — your prompt or image is sent to them only to produce your result, and we use settings under which they do not train models on customer data); Cloudflare R2 for storing images; DigitalOcean for hosting (London, UK); Stripe, Apple and Google for payments; Brevo for email; Google Analytics and Meta for analytics and advertising. Some of these providers are in the United States; transfers rely on the EU standard contractual clauses or an adequacy decision.
How long we keep data
Photos you upload for a stencil are kept for 30 days so you can reopen the stencil from your history, then deleted automatically. Designs and stencils you generate stay in your history until you delete them or your account. Published designs stay in Explore until you remove them. Server logs are kept for up to 90 days. When you delete your account, your profile and published designs are removed immediately and the account can no longer be used; your generation history and the images behind it are deleted 30 days later (the delay lets us handle billing disputes and accidental deletions). We keep a minimal record of purchases (email, dates, amounts) for as long as tax and accounting law requires.
Cookies and local storage
We use cookies and local storage to keep you signed in, remember your language and preferences and keep a draft of your work while you switch tools, plus analytics cookies from Google Analytics and, during ad campaigns, the Meta Pixel. You can block cookies in your browser; signing in and some features may then not work.
Your rights
You can access, correct or delete your data at any time. Deleting your account is self-service: Profile → Delete account (on the website and in the app). To export your data or exercise other rights (objection, restriction, portability) contact us through the Support page and we will answer within 30 days. If you are in the EU or UK you may also complain to your data protection authority (in Portugal, the CNPD).
Children
The service is for adults working with tattoos. It is not directed at anyone under 18 and we do not knowingly collect data from children; if you believe a child has created an account, contact us and we will delete it.
Changes
We may update this policy. The “Last updated” date at the top changes when we do, and we tell you inside the product or by email about material changes. Continued use after a change means you accept the updated policy.