Privacy, itemized.

• · an anonymous account id, created the moment you load the page — no name, no email, nothing typed
• · an email address, only if you choose to attach one to bank a balance past $0.10 — used for the magic link and nothing else; no newsletter, no password
• · your prompts and the images generated from them (stored so your receipts and share links keep working)
• · the ledger: every credit and debit on your balance, in microdollars, append-only
• · ad-view events: when a view started, finished, and what it credited — the accounting needs them

two jobs only: keeping you signed in (Supabase auth cookies) and remembering light/dark mode. no analytics cookies, no tracking pixels, no fingerprinting.

today every ad is a house ad — our own placeholder creative. nothing about you is shared with any ad network, because there isn't one yet.

when real ad networks arrive, a consent banner ships before they do — EEA/UK visitors will be asked under GDPR/TCF rules before any ad code loads, and this page gets a dated update naming the networks.

• · Supabase — database and auth (the ledger lives here)
• · Replicate — runs your prompt through the model you picked
• · Vercel — hosting

that's the whole list. nobody buys, rents, or borrows it.

prompts are checked before any money moves or any model runs. rejected prompts cost $0.0000 and are not generated.

• · stay anonymous forever — email is only needed above $0.10
• · ask for deletion: we remove your account, prompts, images, and email; ledger rows are anonymized (the accounting survives, you don't have to be in it)
• · requests: jamesleoluddy@gmail.com