# Privacy and media processing summary

Canonical: https://tiptoeinmyjordans.site/privacy-policy

Last reviewed: 2026-10-16

This is a plain-language technical summary, not a replacement for the full [Privacy Policy](https://tiptoeinmyjordans.site/privacy-policy) or [Terms of Service](https://tiptoeinmyjordans.site/terms-of-service).

## Data used for generation

The service processes the uploaded photo, optional prompt, selected resolution, consent confirmation, and technical request data needed to create and secure the generation. Users must own the image or have permission from every identifiable adult shown. Images of anyone under 18 are prohibited.

## Processing flow

1. The browser sends the image and settings to a Cloudflare Worker.
2. The Worker temporarily writes the source image to private Cloudflare R2 and creates a short-lived signed URL.
3. The image, prompt, selected settings, and related technical data are sent through fal.ai to MiniMax H3 Max at `minimax/h3-max/reference-to-video`.
4. fal.ai processes the task asynchronously. The application uses polling and signed webhooks to receive status and result data.
5. A successful provider result is downloaded and copied into private Cloudflare R2.
6. After the job reaches a final state and the result has been handled, the temporary source image is designed to be deleted from application R2, including after a handled failure.

## Storage and retention

- A successful video is available through a private signed result link that expires after 24 hours.
- The underlying generated-video object may remain until the deployment operator deletes it or applies a retention rule, but no fixed retention period is guaranteed. Download results promptly.
- Account, session, credit, order, subscription, and generation-history records are stored in Cloudflare D1.
- Stripe processes payment credentials on its hosted checkout page; the service does not store full card details.
- Cloudflare, fal.ai, MiniMax, Stripe, network providers, and platform logs may have their own retention practices. The service does not promise that every transient copy or provider record disappears at the same moment.

The service does not sell uploaded photos or generated videos. Information is shared with providers only as needed to operate the service, when required by law, or when necessary to protect users, the public, or the service.

---

## 中文说明

这是一份便于阅读的技术摘要，不能代替完整的[隐私政策](https://tiptoeinmyjordans.site/zh/privacy-policy)和[服务条款](https://tiptoeinmyjordans.site/zh/terms-of-service)。

本服务会处理上传照片、可选提示词、所选画质、授权确认以及生成和安全保护所需的技术请求数据。用户必须拥有图片，或已获得图片中每位可识别成年人的许可；禁止上传任何未满 18 周岁人士的图片。

浏览器先把图片和设置发送给 Cloudflare Worker。Worker 将源图片临时保存到私有 Cloudflare R2，并创建短时有效的签名 URL。图片、提示词、设置和相关技术数据随后通过 fal.ai 发送给 MiniMax H3 Max 的 `minimax/h3-max/reference-to-video` 端点。任务异步完成，应用通过轮询和签名 Webhook 接收状态。成功结果会下载并复制到私有 R2。

任务进入最终状态且结果处理完成后，包括已处理的失败任务，临时源图片按设计会从应用 R2 删除。成功视频通过私有签名链接访问，链接 24 小时后失效。底层生成视频可能保留至运营者删除或保留规则执行，但不承诺固定保留期限，请及时下载。

账户、会话、积分、订单、订阅和生成历史记录保存在 Cloudflare D1。Stripe 在其托管结账页处理支付凭据，本服务不保存完整银行卡信息。Cloudflare、fal.ai、MiniMax、Stripe、网络服务商及平台日志可能采用各自的保留规则，本服务不承诺所有瞬时副本或服务商记录会同时消失。