Privacy policy

Last updated: October 13, 2026

This policy explains how Fan Transition (“we”, “us”) handles personal data when you use Fan Transition.

Information we collect

Account data. If you sign in with Google, Google provides your account identifier, name, email address and profile image. If you sign in with an emailed link, we store your email address and a record of the link we sent. We store these so you can access your account and history.

Photos and videos. We store the photos you upload, references to those photos, generated videos, job status, credit usage and your confirmation that you have the necessary permissions. Photos can identify the people shown. Upload only photos you have permission to use and only people who agreed to appear in the resulting AI-generated video.

Temporary browser drafts and request recovery. When you start sign-in with an editing or generation form open, its current text, settings, and already-uploaded media references can be kept in this browser for up to 30 minutes so they can be restored after authentication or when you return without signing in. Sign-in drafts are removed when restored, and expired drafts are removed by the open page or on a later visit. Raw files selected from your device are not copied into this sign-in storage.

Billing data. Waffo Pancake or NOWPayments (cryptocurrency) processes payment details, depending on the method you choose at checkout. We receive customer, invoice, payment-status, country, tax and transaction identifiers, but not full card numbers or wallet keys. If you are in the European Economic Area, United Kingdom and Switzerland, we record your consent to immediate supply (time, country and wording version) with the purchase.

Technical and analytics data. Essential logs may include IP address, browser details, timestamps, security events, and errors. If you consent, Google Analytics 4 and Microsoft Clarity may collect page use, interaction, device, and session data. Clarity may provide privacy-filtered session replay and heatmaps.

If you choose Waffo checkout, we share your account email, an internal purchase reference, selected plan, and purchase amount with Waffo Pancake to provide checkout, tax calculation, receipts, subscription management, fraud prevention, and refunds. Waffo handles payment information on its hosted checkout; we do not receive full card numbers. We retain transaction identifiers and payment status for accounting, support, and applicable legal obligations.

If you choose crypto checkout through NOWPayments, we share an internal purchase reference, selected plan, purchase amount, and currency with the crypto payment provider to create the payment invoice. We receive invoice and transaction identifiers, payment amounts, and payment status to confirm the purchase and maintain your credit balance. We retain these billing records for accounting, support, and applicable legal obligations.

How and why we use data

We use data to provide and secure accounts, process generation and payments, maintain credit balances, prevent abuse, troubleshoot failures, support customers, measure product performance, and meet legal or tax obligations. Where applicable, our legal bases include performing our contract, legitimate interests in security and service improvement, consent for optional analytics, and compliance with law.

Processing partners and international transfers

あなたが選択した写真、記述したコーデ説明、それらから描かれたコーデ画像、固定のテンプレート動画および固定のシーン指示を、サードパーティの画像・動画処理サービスに送信します。処理パートナーは独自のデータ取り扱い条件に基づいてファイルを処理し、当社のアカウント履歴とは別にデータを保持する場合があります。機密画像はアップロードしないでください。写真を送信する前にパートナーの保持期間やトレーニング利用について詳細が必要な場合はサポートにお問い合わせください。

We share only what is needed with Google for authentication and optional analytics, Waffo Pancake or NOWPayments (cryptocurrency) for billing, Microsoft for optional Clarity analytics, and the hosting, database, and generation-processing partners needed to operate the service. These partners may process data in other countries under their terms and legally recognized transfer safeguards.

Retention

Uploaded photos and generated files are stored to process jobs and provide account history; they are not automatically deleted at the end of a generation. Request deletion of specific photos or results by emailing support, or use account deletion to remove your account and associated media from our storage. A deletion request for data held by a processing partner may require separate handling. Billing and security records may need to be retained as described below.

Account and product records are kept while your account is active. Generation result links can expire under storage rules. Security logs are normally kept only as long as operationally needed. Billing and tax records may be retained for the period required by law. After a valid deletion request, we delete or anonymize data that is not legally required.

Cookies and controls

Essential cookies maintain your secure session and choices. We also use a random first-party browser identifier to count unique page visits and generate-button clicks without storing prompt text, uploaded content, or generation settings. Optional third-party analytics runs only after you choose “Allow analytics”. GA4 receives registered event names and a canonical clean public-page path, never query strings, fragments, account identifiers, prompts, filenames, provider responses, uploaded or generated content, or custom product-event properties; advertising storage, Google signals and ad personalization are disabled. Account, sign-in, admin, receipt, unknown, query-string and fragment-bearing documents do not load optional analytics. You can withdraw through the cookie policy; the page reloads after clearing only this site's optional analytics cookies.

Where Clarity is enabled, with your analytics consent we associate signed-in visits on approved public pages with a site-prefixed internal account ID to understand visits across devices. Clarity hashes this identifier before transmission. We do not supply your email or name through this feature. Signing out or switching accounts ends the current recording and clears Clarity cookies. Private pages remain excluded. You can withdraw analytics consent in Cookie preferences.

Your rights

Depending on where you live, you may request access, correction, deletion, portability, restriction, or objection, and may withdraw analytics consent. You can submit deletion from the account page or email [email protected]. We may need to verify your identity. You may also complain to your local data-protection authority.

Children

The service is not directed to children under 13, and users must be old enough to enter a binding contract in their jurisdiction.

Security and changes

We use access controls, secured session cookies, server-side credentials, signed payment-provider webhooks, and encrypted transport. No system is completely secure. Material policy changes will be posted here with a new effective date.

Contact

Data controller: Fan Transition. Privacy questions: [email protected].

Abuse prevention and account security

To limit free offers and keep accounts secure, an essential first-party browser cookie lasts up to one year, and our server stores a hashed random browser identifier so a welcome offer is given once per browser per site.

When you sign up, sign in, check in or claim a free-credit offer, we also record a keyed hash of the network you connect from (your IPv4 address, or the /64 block of an IPv6 address), together with your country and browser type. We never store the raw address. We use these records to give welcome credits once per network across our sites, give the daily check-in reward once per network per day, detect several accounts operating from one network, and investigate abuse, fraud and chargebacks; authorized administrators can see which accounts used the same network. Our legal basis is our legitimate interest in preventing abuse and fraud. The records are kept while your account exists and as long as needed to resolve abuse or payment disputes. Contact support if you believe an offer was withheld in error.