Privacy Policy

01What we collect

• Google account details. When you sign in with Google we receive your name, email address, profile photo and a Google account ID. We never see your Google password.
• Your uploads. The two character images you submit. We convert them to a standard format before generating.
• Generated videos and job details. The finished video, its length and quality, timestamps and processing status.
• Credits and purchases. Your credit balance and a history of free credit grants, purchases, holds, spends and refunds. Card details are entered on Stripe’s checkout page and never reach our servers; we receive the payment result and amount.
• Technical data. Standard server logs such as IP address, browser type and request times, used for security and troubleshooting. We also record the country your request comes from (derived from your IP address by our network provider) with your account, your videos and our visitor counts; we don’t store a more precise location.

02How we use it

• to sign you in and keep your videos tied to your account, so you can leave and come back on any device;
• to generate, store and deliver your videos;
• to manage credits, process purchases and prevent free-credit or payment abuse;
• to moderate content and enforce our Terms of Service;
• to answer support requests.

We don’t use your uploads or videos to train AI models, and we don’t use them in our marketing without your permission.

03Who we share it with

We don’t sell personal data. We share it only with service providers that help run the site, and only as needed:

• Google — to sign you in and, if you allow analytics, to measure public page visits and product actions with Google Analytics.
• AI video generation providers — your two character images and the template clip are sent to our generation provider to render the video.
• Stripe — to process payments. New purchases use Stripe Managed Payments, with Link as merchant of record. Stripe/Link may collect billing details for tax calculation and provide receipts and transaction support under their own privacy policies.
• Hosting and infrastructure providers — which store data on our behalf.

We may disclose information if the law requires it, or to protect our users and the service from fraud or abuse.

04Analytics and your choices

We use self-hosted Plausible to measure public page visits and actions such as choosing video settings, trying examples, opening sign-in, submitting a generation, downloading a video and opening checkout. Only predefined product choices are recorded. Page query strings and fragments, uploaded images, filenames, account details, task IDs and payment details are excluded.

Our server forwards your IP address and browser User-Agent to Plausible to calculate daily visitor counts and approximate location and device statistics. Plausible does not store the raw IP address or use analytics cookies. Plausible requests go through this website. We honor the browser’s Do Not Track setting.

If you choose “Allow analytics”, we also load Google Analytics 4. Your browser sends Google sanitized public page URLs, page titles, referral domains, predefined product actions and technical device information. Google processes your IP address to derive approximate location and uses first-party analytics cookies to distinguish visits. We disable advertising personalization and Google signals. We do not send your images, filenames, email, account IDs, job IDs, payment IDs or URL query strings and fragments. Analytics cookies expire after up to 13 months. You can decline without affecting the studio, or withdraw your choice below.

See Google’s privacy policy.

Google Analytics: off. Allow analytics

05Cookies and local storage

We use the following first-party cookies. Optional Google Analytics cookies are set only after you allow analytics; advertising cookies are disabled:

• hl_session keeps you signed in for up to 30 days. It’s random, and we store only a hashed copy.
• hl_oauth protects the Google sign-in step and expires after 10 minutes.
• hl_vid is a random visitor ID we use only to count visitors in aggregate (how many people visit, and from which country). It isn’t shared with anyone, isn’t used across other sites and expires after 13 months.
• _ga and _ga_* are optional Google Analytics identifiers. We store your allow/decline preference on your device under hl_ga_consent. Turning analytics off removes the analytics cookies.

If you start a video before signing in or buying credits, your browser temporarily keeps the form (including the two images) in local storage so it isn’t lost. It stays on your device and is discarded after an hour or once restored.

06Retention and deletion

We keep your uploads and videos while your account is active so you can return to them. Credit and payment records are kept as long as needed for accounting, tax and fraud prevention.

To delete specific videos or your whole account, email support@hotellobbygenerator.net from the address you sign in with. We’ll delete your uploads, videos and profile within 30 days, except records we must keep by law.

07Your choices and rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, or object to certain processing. Email us and we’ll respond within 30 days. You can also sign out at any time, and revoke our access from your Google account settings.

08Security

Videos and images are only served to the account that created them. Sign-in sessions are stored as hashes, and connections to the site are encrypted. No system is perfectly secure, but we work to protect your data and will notify affected users of a breach as the law requires.

09Children

The service is for adults 18 and over. We don’t knowingly collect data from children, and uploads showing anyone under 18 are not allowed. If you believe a child has used the service, contact us and we’ll delete the data.

10Changes to this policy

We’ll update the effective date when this policy changes, and let signed-in users know about significant changes.