Privacy Policy

Last updated — September 8, 2026

1. Information We Collect

You share the following with us directly:

Your email address and any profile information you provide when creating an account
Text prompts you submit to generate artwork
Reference images you upload to guide a generation (optional)
Payment details, handled directly by our payment processor — we never see your full card number

We also collect limited technical data automatically:

Account activity such as number of generations, timestamps, and credit usage
Basic server logs (request paths, error traces) used to diagnose problems
If you consent to it, which link brought you to the site — one short word such as “reddit”, and the date. See Cookies.

2. How We Use Your Information

We use your information to:

Provide and operate the service
Understand which of our links people arrive from, so we know where to spend — only if you consented, and never to build a profile or target you with advertising
Send account-related and billing communications
Process payments for paid plans
Investigate issues, enforce the Terms of Service, and protect users
Improve the overall service experience

We do not train AI models on your prompts, uploads, or generated content. Generation itself is performed by third-party AI providers — see Section 5.

3. How Your Content Is Processed

When you submit a generation, your prompt (and any reference image you chose to upload) is forwarded to the third-party AI provider responsible for that generation. The resulting image or animation is returned, stored in our object storage, and associated with your account so you can access it from your history.

Generated content is stored in your account and can be deleted at any time from the history page. We do not sell your personal information to third parties.

4. Cookies

We keep this short because the list is short. Every cookie below is first-party — set by minia.art, readable only by minia.art, and never shared with an advertising network or data broker.

Cookie	Purpose	Kept	Consent
__session	Keeps you signed in. Set by Clerk, our authentication provider.	Session	Not required
minia_consent	Remembers the choice you made below, so we stop asking.	1 year	Not required
minia_src	Remembers which link brought you here — for example that you arrived from an ad — so that if you later create an account we know which of our links are worth keeping. It stores one short word and the date, nothing else.	30 days	Only with your consent
_clck	Set by Microsoft Clarity, which shows us how pages are actually used — where people click, how far they scroll, and a replay of the page reconstructed from those events. This one recognises the same browser across visits.	1 year	Only with your consent
_clsk	Also Microsoft Clarity — ties the pages of a single visit together so the replay is one session rather than several.	1 day	Only with your consent
CLID, ANONCHK, MR, MUID, SM	Also Clarity, but set on Microsoft's own domains rather than ours, which is why they are listed separately: we cannot read or delete them from this site. Withdrawing consent asks Microsoft to clear them, which is the only route there is.	Up to 1 year	Only with your consent

The first two are strictly necessary: without them you cannot stay signed in, and we could not remember that you asked us not to set the others. The rest are not necessary. Nothing below the line is set unless you choose it, the two purposes are chosen separately — agreeing to be counted is not agreeing to be recorded — and anything already set is deleted if you change your mind.

You can change or withdraw your choice at any time using Cookie settings at the bottom of any page. Withdrawing is one click, the same as giving it.

We measure page views with Vercel Web Analytics, which is cookieless — it sets nothing on your device and does not identify you, which is why it is not in the table and why we do not ask you about it. Our payment processor, Stripe, may set its own cookies for fraud prevention while you are on its checkout page. We run no advertising or cross-site tracking cookies.

Separately from cookies, we record two moments in your own account on our own servers: when a generation is refused because you have run out for the month, and when you open the checkout page. Each is your account id, the name of the step, and the time — no content, no page history, nothing that leaves this site. We do this because we cannot otherwise tell whether people are running out and losing interest or running out and finding the price wrong, which are different problems. It sets nothing on your device, so there is nothing to consent to; the lawful basis is our legitimate interest in knowing whether the product works (Art 6(1)(f)). Deleting your account deletes it.

We do use session replay, through Microsoft Clarity, and only if you agree to it. It is worth being precise about what that is: a replay is rebuilt from what changed on the page, not filmed from your screen. Anything you type into a box is masked before it leaves your browser and cannot be unmasked by us, and the drawing canvas the tools under /tools use is not captured at all — an image you censor there is still never sent anywhere, including to Microsoft. Clarity is operated by Microsoft in the United States, under the EU–US Data Privacy Framework.

5. Third-Party Services

We rely on the following processors to operate the service. Most are based in the United States or process data there; by using the service you consent to such international transfers.

Clerk — authentication and account management (receives your email and auth identifiers)
Stripe — payment processing and subscription billing (handles card details directly)
Neon — managed Postgres database (stores account metadata, generation history, and subscription state)
Cloudflare R2 — object storage for generated images and animations, and any reference images you upload
Replicate — AI model host for pixel-art generation (receives prompts and any uploaded reference image)
Resend — transactional email delivery
Vercel — application hosting, deployment, and serverless execution

Microsoft Clarity is different, and the difference matters. Everyone above is a processor: they handle data on our instructions and for our purposes. For Clarity, Microsoft Ireland Operations Limited is an independent controller — it decides for itself how the data is used, and we cannot direct it. So it is named here as a recipient rather than listed as one of our processors, and what it does with the data is governed by its own privacy statement. It receives nothing unless you agree to statistics, and we do not grant it any advertising purpose.

6. Your Rights

Depending on where you live, you have some or all of the following rights:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data
Export your generated content
Opt out of non-essential communications
Lodge a complaint with your local data-protection authority (for users in the EEA/UK)

To exercise any of these rights, email hello@ketryon.com.

7. Data Retention & Deletion

We retain your account data, generation history, and stored media for as long as your account is active.

You can permanently delete your account, generation history, stored media, and subscription record at any time from Settings — this takes effect immediately. If you’d rather have us do it for you, email hello@ketryon.com and we will process the request within 30 days. We may retain a minimal record of billing events where required for legal, accounting, or fraud-prevention purposes.

8. Children’s Privacy

The service is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child has provided us with personal information, contact us and we will delete it.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or via the service. Continued use after changes take effect constitutes acceptance.

10. Contact

Privacy questions? Reach us at hello@ketryon.com.