Privacy policy

Effective October 18, 2026. This policy describes processing on oouuhai.org. Contact hello@oouuhai.org for privacy requests.

Your photos and generated videos

We send your uploaded photos and generation directions to KIE to produce the requested video. KIE processes those inputs under its own data policies. Completed videos are stored in private Cloudflare R2 storage and served only to their authorized account. We do not publish your uploads or results in a public gallery. Public examples use fictional adult portraits.

Accounts and essential cookies

We store your email, a securely derived password hash for email accounts, verification tokens and session records. When enabled, Google sign-in supplies a verified email and account identifier. Cloudflare Email Service delivers verification and password reset emails. Essential cookies maintain your session. Sessions expire after seven days; account email links expire after one hour and are single use. Verification and reset tokens are removed from page URLs before the account screen and optional tracking load.

Payments and operational records

Waffo processes payment details. We store order references, amounts, credit transactions and delivery status; we do not store card numbers. Private account and order records retain landing-page and acquisition summaries. Video records retain first and latest authorized download response times and counts to help diagnose delivery. A response does not prove that a complete file was saved.

Usage analytics

We keep a private funnel record on Cloudflare using a random analytics session cookie that expires after 30 minutes of inactivity. It records public landing pages, referrer hostnames, campaign labels and account, generation or checkout outcomes. Event properties exclude emails, passwords, photos, filenames, generation directions, card details and authentication tokens. Private account, task and order references connect activity and deduplicate outcomes. Detailed events are kept for 90 days. Associated account, order and video summaries follow the retention of those records. Setting the browser’s plausible_ignore preference disables optional interaction tracking.

Safety and reports

Waffo Prompt Screening checks generation text before photos are uploaded or credits are reserved. We retain a verdict, request reference, timestamp and prompt hash. The prompt scanner does not analyze photos or frames. Reports include the submitter’s email, references and description and are stored privately for investigation, response and appeals. Notification emails contain a case reference, not the report contents.

Retention, access and deletion

Videos remain in storage until deleted. Keep a downloaded copy of files you want to retain. Contact us to request access or deletion, quoting your account email and relevant video IDs. Some order, enforcement and transaction records may need to be retained for operational and applicable legal obligations. We use our hosting, email, AI and payment providers to deliver this service, and these providers may process data in other countries.