Privacy

This describes what actually happens to your data, in the order it happens. Where a retention period is stated it is the one configured in the service, not a rounded-up guess.

Last updated 31 July 2026

The photo you upload

Before a generation finishes, your browser keeps the unfinished edit locally and will restore it for no more than 24 hours. That local draft contains the selected photo, instruction, model and settings so signing in or completing a purchase does not make you start again. It is stored on this device, is not sent to us merely by being saved, and is cleared after a successful result or when you choose another photo. Editara never restores a draft more than 24 hours after its latest save and schedules its local deletion for the same deadline while the page is active. If the tab or browser was closed or suspended at that moment, expired drafts are deleted on your next Editara visit. Clearing this site's browser data removes them immediately as well.

When you submit an edit, the image is written to Cloudflare R2 object storage so the model can fetch it, and deleted again as soon as generation finishes. This is the normal path and it happens within the same request.

As a backstop, every stored input also carries an expiry marker 24 hours ahead. That exists for the case where the deletion step itself fails — a storage error, an interrupted request — so that nothing can persist quietly because of a fault. A failed cleanup is logged so it can be noticed and chased.

We do not sell your images, share them with anyone outside the processors named below, or keep a standing library of customer photographs — because the upload is deleted when the request that used it finishes, there is nothing left to build one from.

Improving the service

We use technical and aggregate information — whether a generation succeeded, error rates, which pages get opened — to research and improve Editara and to develop future features. This is the ordinary operation of the service and does not involve holding on to your photographs.

If our use of data ever changes materially, this page changes first, the date at the top moves with it, and the change applies to what happens after that point rather than retroactively.

Who processes the image

Generation is performed by fal.ai, which receives the image and your instruction in order to produce the result, acting as our processor. Hosting, storage and the security check run on Cloudflare. Payments, when you make one, are handled by Stripe, which receives your billing details directly — we never see or store a card number.

These are the only third parties that receive anything. Their own terms govern what they do with it as processors on our behalf.

The result, and how long it lives

The output is stored behind a link with a random identifier that cannot be guessed or enumerated. It is not listed anywhere, and it is not indexed.

• Anonymous: the link expires after 1 day.
• Free account: 7 days. An account also keeps a limited number of the most recent results — 60 on a free account — and older ones are deleted as newer ones are made.
• Paid plan: retained while the subscription is active, and for 90 days after the last period paid for ends. The number of most-recent results each plan keeps is stated on the pricing page.

You can delete any result yourself, from your account. Deleting one removes the stored file, its record and the link together, and it is not reversible.

Anyone you give the link to can view the result while it is alive, which is what makes sharing work. Treat it as you would any unlisted URL.

Using it without an account

Anonymous use does not create a profile. The daily free allowance is counted against a one-way hash derived from your connection, not against an identity, and the counter itself expires on a daily cycle. The hash cannot be reversed to recover an address.

Because the counter follows the connection rather than the browser, people sharing a network share the allowance. The trade is deliberate: the alternative is an identifier that follows you personally, which is the thing this design exists to avoid.

If you make an account

We store your email address, authentication records, credit balance and billing state. If you sign in with Google, we receive your email address and basic profile from Google for that purpose only.

You can delete the account, and everything attached to it, from your account settings. That removes the record rather than flagging it, and it is not reversible.

Analytics and cookies

Analytics do not run until you consent to them, and the default is off. Nothing is loaded, and no analytics cookie is set, before that choice is made. You can change your mind at any time on the privacy choices page, which also explains how to clear what was already set.

The cookies that are always present are the ones the site cannot function without: your session if you are signed in, and the security check that keeps the anonymous endpoint from being abused. These are not used for advertising and there are no advertising cookies here.

Security checks

A Cloudflare Turnstile challenge runs before a generation. It exists because an anonymous endpoint that costs real money per call is otherwise an open target, and without it the free tier would not survive. It reads signals about the browser making the request, not about you.

Your rights

Depending on where you live you may have the right to access, correct, export or erase your personal data, and to object to processing. The account deletion control exercises the main one directly. For anything else, write to us via the contact page and we will action it.

Because uploads are deleted at the end of each request, a request to erase a photograph you edited is usually already satisfied before you send it.

Children

This service is not intended for children under 13, and we do not knowingly hold data belonging to them. If you believe a child has created an account, tell us and it will be removed.

Changes

If this policy changes in a way that affects what happens to your data, the date at the top changes with it. Material changes will be noted on the site rather than made quietly.