Privacy Policy

1. Who We Are

TattooIdeas provides AI-assisted tattoo design, image-to-tattoo conversion, tattoo lettering, and virtual tattoo try-on tools through tattooideas.app (the Service). In this policy, “TattooIdeas,” “we,” “us,” and “our” refer to the operator of the Service.

For privacy questions or requests, email support@tattooideas.app.

2. Information We Collect

Account information

When you sign in with Google, we receive information authorized by Google, such as your name, email address, profile image, account identifier, and email-verification status. We also maintain authentication records, session identifiers, login timestamps, IP address, browser or device information, and account-security status.

Tattoo projects and files

When you use an AI creation tool, we process the information needed to complete and save your project, which may include:

Your prompt, selected style, body placement, color, detail, and aspect ratio
Images you submit to Image to Tattoo or another upload-enabled feature
Generated tattoo designs and related project history
Generation status, model and provider identifiers, credit cost, and technical error information

Generated designs and uploaded project files are private by default and are delivered through authenticated file access. We do not intentionally publish them in a public gallery without a separate action or permission from you.

AI Tattoo Generator prompt safety screening

Before the AI Tattoo Generator sends a free-text prompt to the image-generation provider, it sends the prompt and a language hint to Waffo Pancake's Prompt Screening API for an automated content-safety decision. Generation proceeds only when that service returns an allow decision; prompts returned for review or blocking are not submitted for image generation. Waffo describes this screening request as stateless and says it does not retain the prompt text after returning the decision. This screening applies to the AI Tattoo Generator and does not imply that every TattooIdeas tool uses the same screening workflow.

Virtual try-on data

The current template-based Virtual Tattoo Try-On processes tattoo artwork selected in the editor in your browser. Local background removal, placement, scaling, rotation, and compositing are performed on your device. The editor does not upload that locally selected artwork merely because you open, adjust, or download a preview. Resetting or closing the page clears the browser-local selection.

A tattoo design opened from another TattooIdeas tool may already be stored under the rules for that tool. If a future try-on feature offers cloud saving or AI processing, the interface will identify the upload, credit cost, and retention terms before that action begins.

Image to Tattoo data

Choosing a file on the Image to Tattoo page makes the browser apply its displayed orientation, remove embedded metadata, preserve its proportions, place transparent areas on a white background, and prepare one normalized preview. The browser uses WebP when its Canvas encoder supports it and otherwise uses the standard PNG fallback. That prepared image remains in your browser while you review the preview and settings.

When you explicitly generate a tattoo design, the same normalized WebP or PNG source is sent to a large AI model service for processing and stored as a private project file in Cloudflare R2. A private database record links that source-file reference to the Image to Tattoo generation job; the generated design is stored separately. Both files are delivered only through authenticated access and are retained until you delete the project, subject to the general limitations below. A saved source image remains private and is retained for troubleshooting even if generation fails or is canceled. Failed-generation credit refunds are unaffected. TattooIdeas does not receive or store a separate copy of the initially selected JPG, PNG, or WebP image data, although its filename may be saved as the project label. The large AI model provider processes its copy under its own terms and privacy policy.

Tattoo cover-up data

Before you select Analyze, the old-tattoo photo and rectangular redesign selection remain in your browser. When you select Analyze, the editor sends a normalized WebP source image and WebP selection preview, or their standard PNG fallbacks when WebP encoding is unavailable, to a large AI model service. This free analysis is used to suggest cover-up directions. TattooIdeas does not save either prepared analysis image as a project file. The model provider processes the request under its own terms and privacy policy.

When you later explicitly generate a cover-up preview, TattooIdeas saves one normalized WebP or PNG fallback copy of the source photo and the generated result as private files associated with your project. We retain those private project files until you delete the project or your account, subject to the general retention limitations below. A saved source image remains private and is retained for troubleshooting even if generation fails or is canceled. Failed-generation credit refunds are unaffected. We do not retain a separate copy of the original upload.

For AI processing, the editor also prepares a temporary PNG copy and a matching inpainting mask. Those two provider inputs and your design direction are sent to a large AI model service. TattooIdeas does not save the temporary PNG or mask in R2 project storage. The model provider may temporarily retain request and response records under its own retention policy for troubleshooting. Where supported, TattooIdeas requests a short expiration for temporary provider media. The generated preview is copied into private account storage and follows the retention and deletion rules in this policy.

Tattoo stencil data

Choosing a file on the Tattoo Stencil page makes the browser apply the displayed orientation, remove embedded metadata, preserve the image proportions, place transparent areas on a white background, and prepare one normalized preview. The browser uses WebP when its Canvas encoder supports it and otherwise uses the standard PNG fallback. That prepared image remains in your browser while you review the preview and settings.

The same normalized WebP or PNG source is sent to a large AI model service for the requested conversion and stored as a private project file in Cloudflare R2. A private database record links that source-file reference to the Tattoo Stencil generation job; the generated stencil result is stored separately. Both files are delivered only through authenticated access and are retained until you delete the project, subject to the general limitations below. A saved source image remains private and is retained for troubleshooting even if generation fails or is canceled. Failed-generation credit refunds are unaffected. The large AI model provider processes its copy under its own terms and privacy policy. TattooIdeas does not receive or store a separate copy of the initially selected JPG, PNG, or WebP image data, although its filename may be saved as the project label.

Credits and payments

We maintain your credit balance, credit transaction history, generation charges, failed-generation credit reversals, and purchase records. The payment provider identified on the current checkout page processes your payment credentials; depending on the deployment, this may be Waffo Pancake, PayPal, or Stripe. Waffo Pancake, and Stripe when Managed Payments is enabled, may also collect contact, billing, and tax details and act as merchant of record. PayPal or Stripe may process account, card, or other payment-method details. We receive transaction information such as an order or transaction identifier, status, subtotal, tax, total amount, currency, selected package, and payer or customer reference. We do not receive or store your full card number.

Support and communications

If you contact us, we collect the information you provide, including your email address, message, attachments, and related support history.

Usage and technical information

We may collect request logs, pages viewed, referring pages, approximate location derived from IP address, browser and device type, language, diagnostics, security events, and interaction data. More information is available in our Cookie Policy.

TattooIdeas also keeps its own visit observations, cleaned entry paths and campaign/referrer information, tool-start and download actions, and registration, generation and payment records. Browser and session identifiers connect these records; after sign-in, eligible records can be associated with your account. Some browser requests record the full IP address and its observation time. These records run for signed-in and signed-out visitors independently of your third-party Analytics choice. Turning off Google Analytics, Microsoft Clarity or other third-party analytics does not stop or delete TattooIdeas' own records. These usage records do not contain your tattoo prompt text or uploaded image content; project processing and storage are described separately above.

3. How We Use Information

We use information to:

Authenticate users and secure accounts
Analyze, generate, store, display, download, and manage tattoo projects
Operate the credit ledger and confirm purchases
Process payments, prevent duplicate credit grants, and investigate fraud
Provide customer support and service communications
Diagnose failures, maintain performance, and improve usability
Screen AI Tattoo Generator prompts for prohibited content before generation
Enforce our Terms of Service and protect users and the Service
Comply with legal, tax, accounting, and regulatory obligations

We do not sell personal information or private tattoo projects. We do not use private body photos or tattoo projects for targeted advertising or model training.

4. Legal Bases

Where data-protection law requires a legal basis, we process information as necessary to perform our contract with you, comply with law, protect our legitimate interests in operating and securing the Service, and obtain consent where required for optional analytics or similar technologies. You may withdraw consent at any time, without affecting processing that occurred before withdrawal.

5. Service Providers and Disclosures

We disclose only the information reasonably necessary for providers to perform services for us. Depending on the features enabled, these providers may include:

Cloudflare for application hosting, networking, security, D1 database storage, R2 object storage, KV caching, and email routing
Google for Google account authentication
Large AI model providers for processing the relevant tattoo-analysis and generation requests
Waffo Pancake for AI Tattoo Generator prompt safety screening and, when enabled and displayed at checkout, for merchant-of-record services, checkout, payment processing, transaction verification, billing and tax records, fraud prevention, and refund or dispute handling
PayPal, when enabled and displayed at checkout, for checkout, payment processing, transaction verification, fraud prevention, and disputes
Stripe, when enabled and displayed at checkout, for hosted checkout, payment processing, transaction verification, tax handling and merchant-of-record services when Managed Payments applies, fraud prevention, refunds, and disputes
Analytics providers, when configured, such as Google Analytics, Microsoft Clarity, Plausible, or Umami
Crisp, when configured, for customer-support chat

We may also disclose information when required by law, to protect rights and safety, in connection with a corporate transaction, or with your direction or consent. Third-party services process information under their own terms and privacy policies.

6. International Data Transfers

Our providers may process information in countries other than your own. Where required, we use legally recognized transfer mechanisms or rely on providers that offer appropriate contractual and organizational safeguards.

7. Retention

We retain account information, saved projects, credit records, and purchase history for as long as needed to provide the Service. We may retain payment, fraud-prevention, tax, accounting, dispute, and security records for longer periods when required by law or reasonably necessary to establish or defend legal claims.

You can permanently delete completed projects from My Tattoos. Deleting an Image to Tattoo, Cover-Up, or Tattoo Stencil project deletes its private normalized source image and generated result from active project storage. Failed or canceled generations do not appear as completed projects in My Tattoos; to request deletion of their saved source images, email support or use our contact page. To request account deletion, email support or use our contact page. Account deletion removes or disables access to account-linked database records and private project files. Residual objects, security logs, and backups may remain for a limited period or where retention is legally required. Waffo Pancake, PayPal, Stripe, and other independent providers apply their own retention policies.

8. Security

We use access controls, private object storage, authenticated file delivery, encrypted network connections, and other technical and organizational safeguards designed to protect information. No online service can guarantee absolute security, so you should protect your Google account and notify us if you suspect unauthorized access.