Privacy policy

Information we process

We process account identifiers, verification state, login security metadata such as IP address and network prefix, credit balances, support correspondence, prompts, generation settings, source uploads, generated media, safety classifications, and operational logs needed to provide and secure the service. Starter-credit claim records use keyed fingerprints of address, network, and normalized email so the claim can remain enforceable without storing those raw values in that record.

Payments are handled by NOWPayments. We store order identifiers, package and amount details, payment status, destination instructions, and provider identifiers. We do not ask for or store wallet recovery phrases or private keys.

Why we use it

We use data to authenticate you, deliver generations, preserve project history, reconcile payments, prevent fraud and abuse, enforce content rules, answer support requests, and diagnose service reliability.

Authorized administrators may review account activity, prompts, retained source uploads, generated media, timing, errors, and credit history when needed for support, safety enforcement, abuse investigation, or service diagnosis. Access to this detailed activity view is role-restricted and recorded in the administrator audit log.

Analytics

With your permission, Google Analytics processes page visits, session and engagement statistics, approximate geolocation, and browser or device information to help us understand aggregate product usage. RasterBloom records page paths, referrers, standard UTM campaign fields, and funnel events such as signup, verification, generation, pricing, deposit, and payment milestones. Payment events may include the selected pack, currency, and USD price, but not payment addresses or account details. Analytics events do not include prompts, source uploads, generated media, email addresses, or full URL query strings. Advertising, ad personalization, and Google Signals features are disabled. Choosing Essential only prevents the analytics script from loading. You can change or withdraw your choice at any time through Cookie settings.

Storage and retention

Source uploads are private and normally expire quickly unless retained as part of an edit project. Generated media is private and subject to the configured retention period, currently up to 365 days by default. Security, transaction, audit, and legal records may be kept longer when needed for fraud prevention, accounting, disputes, or legal obligations.

Service providers and transfers

We use infrastructure, generation, moderation, email, authentication, anti-abuse, analytics, and payment providers to operate RasterBloom. Cloudflare Turnstile receives the security-check token and network address when a new account is created. Data is shared only as needed for those functions and may be processed in countries different from yours.

Your choices

You can disable mature-content display, delete generations, and request account access, correction, export, or deletion through Support. Some records may be retained where required for security, accounting, dispute resolution, or law.

Security and contact

We use HTTP-only sessions, private object storage, ownership checks, bounded uploads, transactional credit changes, and audit records. No system is perfectly secure. Report privacy or security concerns through Support and do not include secrets in your message.