Skip to main content
WindowPeeper
Sign in

Legal

Privacy Policy

Last updated: October 22, 2026

This Privacy Policy explains how WindowPeeper ("we", "us") collects, uses and protects your personal information when you use our website and services.

Information we collect

  • Account information: your email address, and your name and profile picture if you sign in with Google.
  • Content: the photo you submit and the videos we generate for you. When you make a video from a photo, we also record that you confirmed the photo is of you and that you are 18 or older, and when.
  • Billing information: your orders and credit history. Our payment provider holds your card details. We never see or store them.
  • Technical information: your IP address, browser and device type, and error logs.

How we use your information

  • To create and secure your account and sign you in.
  • To generate and store your videos.
  • To manage your credits and purchases.
  • To send service emails, such as sign-in links and notices that a video is ready.
  • To prevent fraud and abuse, fix errors and meet legal obligations.

We use the photos you upload only to make and show you the videos you ask for, including the safety checks before generation. We do not use your uploads or results to train AI models. We do not sell your personal information.

Service providers

We share your information only with providers that help us run the Service, and only as much as each one needs:

  • Vercel: website hosting.
  • Our database host: stores your account and billing records.
  • Cloudflare R2: stores your uploads and generated files.
  • Alibaba Cloud Model Studio (Bailian / DashScope): generates window peeper videos with Wan 2.7 reference-to-video (wan2.7-r2v) from your photo and a written description of the scene. It processes your photos in mainland China.
  • Waffo Pancake: processes payments as our Merchant of Record.
  • Resend: delivers our emails.
  • PostHog (US Cloud): measures page visits, signups, starting sign-in and its method, steps in the video generator on the home page and in the dashboard (picking a photo, generating, seeing the credit packs, starting payment, downloading and sharing), clicks on the buy buttons of the price list and billing pages, video generation outcomes, checkout starts and successful payments so we can improve the Service. The first page view of each visit also carries the referring site's address without its query and any utm_ campaign tags in the link, so we can see which channels bring visitors. We store a random browser identifier and the last signed-in account identifier in local storage for up to 30 days. After sign-in, we link earlier visits to your pseudonymous account identifier to measure conversion. Signing out or switching accounts resets the browser identifier. Business events include limited product, credit and catalogue-price metadata. We do not send prompts, photos, email addresses or payment credentials. We use pseudonymous person profiles for this linkage, without names or email addresses. We do not enable session replay.
  • Google: signs you in, if you choose Google sign-in.

We also share information when the law requires it.

Google user data

If you sign in with Google, we receive your name, email address and profile picture from your Google account, and nothing else. We use them only to create your account and sign you in, and to show your name and picture in your account. We don't access your Google Photos, Drive, contacts or any other Google data. We never sell this information. We share your email address only with the service providers above that run the Service, such as Resend for emails and Waffo Pancake at checkout. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. You can remove our access at any time in your Google account settings, and delete your account on your profile page.

Cookies and local storage

  • A session cookie keeps you signed in.
  • A language cookie remembers your language.
  • A cookie remembers whether the dashboard sidebar is open, for 7 days.
  • Your browser's local storage remembers your theme choice.
  • Local storage holds the analytics identifiers described above for up to 30 days.
  • A first-party cookie and local storage remember how you first reached the site, for 90 days: the referring site's address without its query, any utm_ campaign tags in the link, the page you landed on, your browser's language and the time. If you create an account, we save this with it to learn which channels bring customers, and send it with the PostHog events above.

We do not use advertising cookies.

Data security

We use HTTPS for all traffic. Your files are private. We open them only through signed links that expire after one hour. We limit who can access production systems.

Retention

We keep your information while your account is open. Photos you upload to make a video are deleted about 24 hours after upload. Videos you generate stay in your library until you delete your account. When you delete your account, we delete your personal information within 30 days, unless the law requires us to keep it longer. We keep billing records for as long as tax and accounting laws require.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, to restrict or object to its use, and to withdraw consent. You can delete your account on your profile page at any time. For other requests, email support@windowpeeper.org. We reply within 30 days. You can also complain to your local data protection authority.

Emails

We send only service emails, such as sign-in links and video notices. We do not send marketing emails.

Where we process data

We and our providers process data in the United States, mainland China and other countries. Where the law requires it, we protect international transfers with appropriate safeguards.

Children

The Service is for people aged 18 and over. If we learn that we hold information about a minor, we delete it.

Third-party services

Waffo checkout and Google sign-in follow their own privacy policies.

Changes

We may update this policy. If the changes are material, we will tell you by email or in the Service at least 15 days before they take effect.

Contact

Questions about this policy: support@windowpeeper.org.