Text to Poster / privacy
Privacy, without the fog.
Text to Poster is a small creative tool. This page explains the few services and identifiers needed to run it.
What we collect
When you sign in, Supabase Auth gives us your email or Google identity and a user profile. We store your prompts, generation settings, task state, and private generated assets so the studio can finish and recover your work. We also receive limited technical logs, cookie identifiers, subscription state, Waffo order identifiers, and analytics events.
Anonymous limits
Before sign-in, a random cookie is combined with a salted HMAC of that cookie, your IP, and User-Agent. We store only the derived guest key for the 24-hour limit, never the raw IP or User-Agent.
Service providers
Supabase provides authentication, Postgres, and private Storage. APIMart receives the prompt and generation settings and routes them to the gpt-image-2-official (GPT Image 2) image-generation endpoint. Waffo processes checkout, payment, and subscription events; it may process payment details as the merchant-of-record provider. Vercel hosts the app, and Umami receives the listed product events without poster prompts. These providers may process data in countries other than where you live.
Why we use it
We use this information to provide the service, authenticate accounts, enforce free-use limits, process subscriptions, secure the service, respond to support requests, meet legal obligations, and understand product usage. We do not sell prompts or generated images and do not use them for advertising profiles.
Retention and deletion
Guest images are kept for 24 hours. Free account images are kept for 7 days. Pro images remain while the subscription is active, then for 30 additional days. Payment and accounting records may be kept longer where required by law. Expired assets are removed by a daily maintenance job. Contact support to request account deletion.
Your choices
You may request access, correction, deletion, or a copy of personal information by emailing support@texttoposter.com. You may stop analytics where the available browser controls or consent settings allow it. We may need to verify a request and retain limited information when a legal or security obligation requires it.
Children and sensitive data
The service is not directed to children under 13, or the higher minimum age required where you live. Do not submit government identifiers, payment card numbers, health data, precise location, or other sensitive personal information in a prompt. If you believe a child’s information was submitted, contact support.
Contact
For privacy questions, data requests, or complaints, email support@texttoposter.com. We may ask for information needed to verify a request and will respond within the period required by applicable law.