Privacy
What we keep, who handles it, and when it’s deleted
Last updated November 15, 2026
The short version
- We keep your house photos and the portraits made from them, and use the photos only to make your portraits.
- Cloudflare hosts the site and processes and stores the images. No other AI company receives them.
- A free portrait’s photo and result are deleted within 24 hours. A pass is deleted 30 days after purchase.
- You can delete everything at once from your studio.
- No account, no ads trackers, and we never sell any of it.
What we collect
- House photos you upload. Before upload, your browser re-saves the photo, which drops the location and camera details phones store inside pictures, including the map position where it was taken. Our server removes any that remain before storing it. We don’t ask for the address, and we don’t try to work it out from the photo.
- The portraits made from them, and the style you picked for each.
- A signed visitor cookie. One cookie that lets the site count your free portrait and show it back to you. It holds no name or email, and it isn’t used for advertising.
- A scrambled form of your IP address. To stop the free portrait being claimed over and over, we keep your IP address only as a hash made with a secret that changes every day. The hash can’t be turned back into your address, and because the secret changes daily, one day’s hash can’t be matched to the next. Raw IP addresses are never stored.
- Your email address, if you buy the pass. Payments are handled by Stripe, which passes us the email you gave at checkout. We use it only to help you when you email us about your order, such as a lost studio link or a refund. We never see your card number.
- Your studio link, kept only as a scrambled (hashed) form, so the link itself isn’t stored in our database.
We don’t ask for your name, address or phone number, and there is no account.
How your photos are used
Your photos are used only to make your portraits. Each upload goes through a check, which turns away photos that show people or don’t show a house, and then through the painting step for the style you picked. There is no free-text prompt.
We don’t sell your photos, make them public, or use them to train AI models. Photos are not written to our logs.
Who processes it
- Cloudflare hosts this site and runs the app. The photo check and the portraits run on Cloudflare Workers AI. Images are stored in Cloudflare R2, a file store, and records such as your pass, its portrait count and your checkout email are stored in Cloudflare D1, a database.
- Stripe handles payments for the pass.
No other AI company receives your photos or portraits.
Who can see your portraits
Your free portrait is tied to the visitor cookie in your browser. A pass lives behind a private studio link, a long random code with nothing personal in it. Anyone holding that link can open your studio, so share it only with people you’d trust with a house key. If you shared it by mistake, replace it with a new link from the studio; the old one stops working.
When it’s deleted
- Free portrait: the photo and the portrait are deleted within 24 hours.
- Pass: everything in it is deleted 30 days after purchase.
- Any time: delete a single portrait, or tap Delete everything in your studio to remove the pass’s photos, portraits and records at once. It can’t be undone.
Backups
Cloudflare’s database keeps point-in-time recovery copies, called D1 Time Travel, so it can be restored after a failure. Deleted database rows can remain in those backups for up to 30 days, and then they are gone. Images are not stored in the database, so they are not in those backups.
Stripe keeps its own record of the payment, which tax law requires. For anything else, such as removing your email without deleting your studio, email us.
No ads, no selling
We don’t sell or rent anything about you, we don’t show ads, and this site has no advertising trackers.
Analytics
We use Cloudflare Web Analytics to count visits to these pages. It sets no cookies, stores nothing in your browser and doesn’t fingerprint visitors. We see only totals, such as pages viewed, the site that referred you, country, browser and device type.
Campaign links
If you arrive from a link with campaign tags (the “utm” part of a web address), the page keeps those tags in your browser for this visit and passes them along when you open the portrait page, so we know which video or post sent you. They’re cleared when you close the tab.
Contact
Questions about your data, or a request to see what we hold: email us.
House Portrait is operated by Stratum Relay LLC.