Privacy policy
How photos, videos and payment records are handled.
Last updated: 2026-10-17
Who we are
Unforgettable Car Trend (unforgettablecartrend.app, "we") makes AI videos and images from photos you upload. This policy explains what we collect, why, who processes it and how to reach us at support@unforgettablecartrend.app.
Information and purpose
We process account email and sessions, authorized photos you upload, generated clips, role and task parameters, task status, credit records, payment receipts and support tickets to deliver requested functions and investigate problems. Payments are handled by our payment processor; we never see or store your full card number. If you join an effect waitlist, we use that email only to notify you once when the effect opens, and we delete it on request.
Service providers
Generation sends your photos, any intermediate image an effect creates and our fixed prompts to image and video models from third-party AI providers that we choose for each effect: Fal (Google Nano Banana image editing, ByteDance Seedance and Kuaishou Kling video models) and APIMart (ByteDance Seedance video models). No third-party footage is used.
Content moderation sends uploaded photos, intermediate images and frames sampled from outputs to AWS Rekognition and to OpenAI's moderation API. AWS processes facial features to detect faces, estimate age ranges and match against its index of public figures. We keep the returned results (verdicts, reason codes, scores, face counts, estimated age ranges and any public-figure match names) as moderation records linked to your account and task; we do not keep face templates. A photo rejected at upload is not stored, but its moderation record is.
The deployment target uses Cloudflare Workers, private R2 media storage and Supabase PostgreSQL for application records. Providers may process data in their service regions under their own retention terms; we do not promise simultaneous deletion from their systems.
Retention and deletion
Photos, intermediate images and generated results expire after 30 days by default and are then no longer accessible through the app. Physical deletion runs as a scheduled maintenance job, so it can lag behind the expiry; we do not promise permanent deletion at an exact hour. Moderation records are kept as long as needed for safety and abuse prevention. Payment, tax and necessary support records are kept for as long as the law requires.
Removing a photo from the editor does not delete its stored object. Request access, correction or deletion through support tickets, including the task ID. We verify account ownership. You can also email support@unforgettablecartrend.app from the address on your account. Self-service account export and deletion are not currently offered.
Private media and examples
Account permissions protect photos and private outputs. Providers receive time-limited read links for the task. Private media will not become public examples without separate permission and review. Never send passwords, full card details or private keys in a ticket.
Free previews
Where an effect offers a free preview, we generate only its first frame from your photos with the same provider, check it with the same safety review, and show you a small, low-resolution copy marked "PREVIEW". The unmarked frame stays in private storage for up to 72 hours so that you can turn it into a paid video; it is never shown or downloadable. To enforce daily preview limits we keep a salted, day-specific hash of your network address, not the address itself.
Prices, currency and tax
We may show and charge prices in euros to visitors in the euro area and in US dollars elsewhere, based on the country code our hosting provider (Cloudflare) attaches to each request. That country code is stored with your account and orders. Any applicable tax is calculated and shown at checkout; our receipts record the currency and amounts charged.
Cookies and analytics
Sessions and language preferences use cookies. When attribution is enabled, first-party cookies record a random visitor ID (fc_vid, 1 year), the first and latest visit source (fc_ft for 90 days and fc_lt for 30 days: campaign parameters, ad click IDs, the referring site's domain and the landing page, never your address or full URLs), and which version of a page you are shown in a test (fc_exp, 1 year). A short-lived marker (fc_su, 10 minutes) notes a completed sign-up for analytics. The source of your first and latest visit is copied to your account and to orders so that we can see which pages lead to sign-ups and purchases. For conversion analytics, only a fixed list of events (for example, an effect viewed or a purchase with its amount) is sent, without your name or email. Server records establish payment and delivery outcomes. Optional analytics load only after you allow them through Analytics preferences.
With your permission, we use Microsoft Clarity to understand interactions on public pages and the payment success page through clicks, scrolling, heatmaps and session replays. Clarity is not loaded before you select Allow analytics. Account, sign-in, admin, creation and other checkout pages are excluded. Personal information in forms, account controls and payment results is masked, and order identifiers in URL parameters are redacted. We do not send custom names, emails or account identifiers to Clarity. Clarity may process browser, device and usage information and set analytics cookies (_clck, _clsk); advertising storage consent remains denied. Your choice is stored locally under fc_analytics_consent_v2. Use Analytics preferences to withdraw: recording stops, Clarity cookies are removed, and the page reloads. Withdrawal does not delete recordings already received by Microsoft. See Microsoft's privacy statement.
Google Analytics, Plausible and Microsoft Clarity are all controlled by Analytics preferences. None of their scripts load until your permission has been saved and checked. Declining does not prevent you from using Google sign-in: authentication starts only when you select that sign-in option. Plausible measures visits to public pages and the payment success page; we send only the page path, without query parameters or a referrer. Withdrawing stops new analytics events and removes loaded analytics by reloading the page; it does not delete data already received by a provider. See the Cookie policy for browser storage and controls.
Contact
Email support@unforgettablecartrend.app, or use support and reporting tickets when signed in. Material changes update this page and its date.