Privacy notice

Last updated: October 9, 2026.

This notice describes the current Freelement Images service. For questions or requests, contact cleverstar02@gmail.com.

Editing and saving in your browser

Editing and PNG downloads happen in your browser. Merely editing or downloading does not upload your scene. Loading the website and its artwork still sends normal web requests to the hosting service.

Working drafts and My creations are stored only in this browser, including uploaded photos. The latest private submission link is also stored there when available. Clearing website data removes those local records. Anyone with access to your browser profile may be able to access them.

When you publish

We receive the scene data, title, description, sharing consent, and a private management token. The server renders the image and stores its image files and thumbnails in Cloudflare R2. Supabase stores submission details, status, dates, consent, and a hash of the management token. The raw token is not stored in the submission database. Photo submissions include the uploaded photos. The server processes them and removes embedded image metadata before storing the editable copy.

Published images, titles, descriptions, dimensions, and publication dates are public. For new submissions, the editable scene data is also available to visitors while the image is published. Search engines and other visitors may copy or download them. Pending submissions remain private to the service and its owner. Do not include private personal information in your title or description.

Reports and abuse prevention

Reports record the image, a selected reason, dates, and a keyed hash derived from the reporter’s IP address. Submission and report limits also use keyed IP hashes. These application records do not store the raw IP address; hosting and security providers may process IP addresses in their own request logs.

Publishing and reporting use Cloudflare Turnstile, which processes technical browser and device information to check for abuse. Read the Cloudflare Turnstile Privacy Notice for details.

Service providers and email

We use Supabase for database services and Cloudflare for storage and bot checks. The production website is configured for Netlify hosting. These providers process requests needed to deliver and protect the service; processing locations depend on their infrastructure and account configuration. If you email us, your address and message are handled through the contact mailbox and its email provider.

Cookies, advertising, and analytics

The owner login uses an essential session cookie lasting up to eight hours. Visitors do not need this cookie to edit or download. The current website uses Umami Cloud for basic audience measurement, such as page views, referrers, browser and device types, and approximate location. We do not configure custom user identifiers or send scene contents to Umami. We also send editor-start and successful-download events, plus Core Web Vitals measurements, with basic format, canvas-size, and element-count details to understand completion and performance. Page views and these events are excluded on private management and owner pages. See the Umami privacy policy for provider information. Advertising is not currently enabled. We will update this notice and the relevant privacy controls before enabling ads.

Retention and removal

Saved scenes and private links stay in your browser until replaced or cleared. Public and pending images remain in storage until removed; rejected submissions are not automatically deleted. The private management link removes image files while retaining a private submission record. Reports, submission metadata, and contact messages do not currently have a fixed automatic deletion schedule.

Rate-limit records older than two days are cleaned up when relevant later requests run. Provider logs and backups may follow separate retention schedules. Removing an image from this site cannot remove copies already downloaded or cached elsewhere. Gallery thumbnails may remain in a visitor’s browser cache for up to one minute after removal; original image requests recheck publication status.

Your choices

You can use the editor without publishing, clear local website data, remove your submission using its private link, or contact us about access, correction, or deletion of information associated with you. We may need to verify a request before acting. See Contact for details.