Privacy Policy

The controller for this data is [legal entity name], [registered address]. For any privacy request, write to [privacy email].

• Account data — your email address, display name, handle, optional bio and avatar choice, and the date you signed up.
• Password — never stored in readable form. We keep a PBKDF2-SHA256 hash with a random per-account salt. We cannot recover your password, only reset it.
• Generation data — your prompts, the model and settings you chose, reference image URLs you supply, the resulting file links, status, cost and timestamps.
• Credit balance — your current balance and the charges applied to it.
• Abuse-prevention data — counters keyed to your account and to a network identifier (IP), used only for rate limiting.

We do not use advertising or analytics trackers, and we do not sell personal data. We do not ask for payment card details; if billing is introduced, card handling will be done by a payment processor and covered by an updated version of this policy.

One cookie, tamago_session. It holds a signed session token, is HTTP-only, and exists so you stay signed in. It is strictly necessary for the service and is not used for tracking. Clearing it signs you out.

To perform our contract with you (running your account and your generations); for our legitimate interests in keeping the service secure and available (rate limiting, abuse investigation); and to meet legal obligations where they apply.

• The generation provider. Your prompt, settings and any reference image are sent to a third-party GPU platform in order to produce the output. Generated files are stored on that provider’s infrastructure. Do not put personal or confidential information in a prompt.
• Our hosting and database provider (Cloudflare), which runs the application and stores account and generation records.

These providers process data on our instructions. Processing may occur outside your country, including where the provider operates its network.

Account and generation records are kept while your account exists. Deleting your account from settings removes your account row and, with it, your generation history. Rate-limit counters are short-lived and are overwritten as their time window passes. Generated files held by the generation provider expire on that provider’s schedule, which we do not control.

Depending on where you live, you can request access to your data, correction, deletion, a copy in portable form, or object to certain processing. You can change your profile and delete your account yourself in settings. For anything else, contact [privacy email]. You may also complain to your local data protection authority.

Đối với công dân Việt Nam, Tamago cam kết thực hiện đầy đủ các nguyên tắc bảo vệ dữ liệu cá nhân:

• Phạm vi xử lý: Dữ liệu chỉ được thu thập nhằm mục đích cung cấp dịch vụ khởi tạo hình ảnh/video theo yêu cầu người dùng, xác thực tài khoản và phòng chống gian lận.
• Bảo mật hình ảnh tải lên: Hình ảnh tham chiếu bạn tải lên được lưu trữ tạm thời phục vụ render và tuyệt đối không được sử dụng để đào tạo (train) mô hình hoặc bán cho bất kỳ bên thứ ba nào.
• Quyền của chủ thể dữ liệu: Bạn có toàn quyền yêu cầu xem, chỉnh sửa hoặc xóa vĩnh viễn toàn bộ dữ liệu cá nhân và lịch sử generate của mình bất kỳ lúc nào qua mục Cài đặt tài khoản hoặc liên hệ hỗ trợ.

Passwords are salted and hashed. Sessions use signed, HTTP-only cookies verified on every request. API routes require an authenticated session and are scoped so one account cannot read another’s generations. No system is perfectly secure; if a breach affects you, we will notify you as required by law.

Tamago is not intended for children. Do not use it if you are under 18, or under the age of digital consent where you live if that age is higher.

Updates appear on this page with a new “last updated” date. Material changes will be highlighted before they take effect.