Preview and upload
Selecting a photo creates a local browser preview. Continuing to checkout sends it to this application’s server. The server validates and resizes it and strips image metadata. Removing the preview does not delete an already uploaded file.
AI providers
After verified payment, the server sends the portrait and a reference frame to OpenRouter’s GPT Image 2.5 Flare endpoint. It sends the edited frame and reference video to Runway Aleph 2.0 through OpenRouter. We do not claim these providers retain no data. Their processing policies also apply.
Storage and access
Photos and videos are stored in private Cloudflare R2 storage. The application uses private temporary working files while processing and serving downloads. Order access requires the browser’s essential HttpOnly cookie, which lasts up to 30 days and is set on upload or checkout. Anyone using that browser session may access those orders; clearing cookies removes access.
Unused uploaded photos become eligible for scheduled cleanup after 24 hours. Completed-job input photos and intermediate frames become eligible 24 hours after completion. Downloads expire 7 days after completion and are removed by scheduled cleanup. Inputs for unfinished or review-held jobs remain for investigation. Order and cost records remain in the database; contact support with your order reference about access or deletion requests.
Payment and other requests
Waffo hosts checkout and collects billing details. This site stores the package, amount, payment references, order status and hashed browser identifier. It does not collect card numbers or security codes. Your photo is not sent to Waffo. See Waffo privacy information.
Hosting services may record request logs under their own settings. For privacy or deletion requests, email support@bulin47ai.store with your order reference.
Website analytics
We use Google Analytics 4 to understand visits to public pages, including page paths, referring sites, browser and device information, and approximate location. Analytics can use cookies. Google Signals and advertising personalization are disabled. We exclude order pages and remove query strings and fragments from page-view information. We do not send uploaded photos, order references or payment details to Analytics.
Read Google’s privacy policy or use the Google Analytics opt-out browser add-on.