Privacy Policy

Last updated: April 16, 2026

1. Overview

This Privacy Policy explains what information Melted Crayons ("we," "us") collects, how we use it, and the choices you have. It applies to your use of the Melted Crayons website and services.

2. Information We Collect

Account data. Your email, display name, and a salted hash of your password. We do not store your plaintext password.

Content you upload. Reference photos, characters, products, brand assets, stories, panels, captions, dialogues, and any other material you create or submit.

Usage data. Basic request logs (IP address, timestamp, endpoint) used for rate limiting, abuse prevention, and debugging. We do not run third-party analytics or advertising trackers.

Cookies. We use only strictly-necessary cookies for authentication (NextAuth session tokens). We do not use advertising or tracking cookies.

3. How We Use Your Information

  • To provide and operate the Service.
  • To generate images and text via AI models based on your prompts and uploads.
  • To enforce our Terms of Service, including detecting and responding to prohibited content.
  • To communicate with you about your account and important service changes.

4. Third-Party Services

To deliver the Service, we share the minimum data required with the following processors:

  • MongoDB Atlas — database hosting for accounts and content.
  • Cloudinary — storage and delivery of image assets.
  • Google (Gemini API) — AI image and text generation. Prompts and reference images are sent to Google for processing.
  • BytePlus (SeedDream) — alternative AI image generation engine, when selected. Prompts and reference images are sent to BytePlus for processing.
  • Vercel — application hosting and edge delivery.

Each processor operates under its own privacy policy. We do not sell your personal information to anyone.

5. Data Retention

We retain account data and content for as long as your account is active. When you delete your account, we permanently remove your profile, stories, characters, and reports from our database. Backups may take up to 30 days to fully expire.

6. Your Rights

Depending on your jurisdiction (including the EU/UK and California), you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to certain processing. You can:

7. Security

We use TLS in transit, salted password hashing (bcrypt), and access controls on our database. No system is perfectly secure; please use a strong, unique password.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

9. International Transfers

We operate primarily in the United States. If you access the Service from outside the U.S., your information will be transferred to, stored, and processed in the U.S. and other countries where our processors operate.

10. Changes

We may update this Privacy Policy. Material changes will be announced on the Service or by email. The "Last updated" date above indicates the current version.

11. Contact

Privacy questions and requests: privacy@meltedcrayons.tv.