Privacy Policy | Gas Station Dance

Operator and scope

Gas Station Dance is operated by John Yan. Country / region and contact address: Hong Kong. For privacy questions and requests, email support@gasstationdance.io. This notice describes the production service and any separately identified test environment.

What happens to a selected photo

When you select a photo in the signed-in generator, the file uploads to Cloudflare R2 so the AI provider can retrieve it. Selection uploads the file before you press Generate; it does not itself create a paid generation task. Removing a photo from the form clears that selection but does not establish that the stored upload has been erased.

When you generate, the ordered photo URLs and our fixed scene instructions are transmitted to fal for Kling O3 Standard processing. The existing persistent-upload implementation stores files under a content-derived object key and returns a media URL. A person who obtains that URL may be able to open the file without signing in. Do not treat such a link as private storage or upload confidential documents. Account-only history is not the same as access-controlled media.

Information used by the service

Google sign-in supplies account information such as your name, email address and profile image. Account and session records identify you and manage access. The application records generation instructions, input and output references, provider task identifiers, status, errors, timestamps and credit changes when tasks are submitted. Order records include purchase descriptions, amounts, currency, payment status and processor references.

Support messages may contain the account, task or order details you choose to provide. Technical logs and operational events may include request information, device or browser details, network information and actions such as starting a task or opening a download. Avoid sending unnecessary sensitive information in prompts or support messages.

Why information is processed

Information is used to provide account access, perform requested tasks, return files, keep task and credit history, reconcile payments, investigate errors, respond to support requests and protect the service against abuse. It may also be retained or disclosed where necessary to comply with applicable legal obligations or resolve a dispute. We do not promise that a browser preview makes the wider service anonymous.

Services involved

Cloudflare provides the application runtime and the configured D1 database and R2 file storage. Google provides sign-in. Stripe provides hosted checkout and payment processing; card details entered on Stripe's checkout are handled by Stripe rather than a card-entry form hosted by this application. The application receives transaction information needed to reconcile an order.

fal supplies the Kling O3 Standard generation endpoint. It receives the three submitted photo references, scene instructions and the authorized original reference video with music to create the requested output. The app records the provider task ID and saves successful outputs to its configured R2 storage.

Relevant provider notices are available from Cloudflare, Google, Stripe, and fal. Each describes that provider's own activities. We do not promise that every provider deletes data immediately or excludes all model-improvement uses.

Cookies, browser storage and measurement

Authentication uses cookies to maintain login state. Browser storage can retain interface preferences and recovery state. The shared application includes first-party visitor attribution: an identifier called sf_visitor_id has a configured cookie lifetime of 180 days and can connect visits with account activity. Attribution can include landing pages, referrers, campaign parameters and advertising click identifiers. A cookie lifetime is not the retention period of the related database records.

We record first-party conversion and task-experience events to understand whether signup, checkout and generation work. This privacy page also explains the cookies used by the service.

You can clear cookies and local storage in your browser; doing so may sign you out. It does not remove existing server records. Signing out is also not a deletion request.

Storage, retention and international processing

Account, task, credit and order records are held in the configured database. Uploaded media and persisted outputs use the configured storage service. Files and requests may be processed in countries other than your own because hosting, payment, authentication and AI providers operate internationally. We do not promise a particular data-residency region or end-to-end encryption.

Media and account history are retained to provide saved results and account access until removed through an operational process. We do not currently promise a fixed automatic deletion deadline or permanent archival storage. Request deletion by email; we review the affected database records, storage objects and provider records, subject to legal, security and accounting needs. Download files you need and avoid sensitive inputs.

Access, correction, removal and complaints

Email support@gasstationdance.io, as listed on Contact to request access, correction or deletion, or to report a likeness issue. Identify the account and affected task or file without sending passwords. We may verify that the request is authorized. A request must be checked against the database, storage and relevant provider systems; a hidden history row is not proof that every copy has been deleted.

Where a record must be kept for a lawful reason, the response should explain the affected category and reason. Rights and complaint options depend on the law that applies to you; nothing in this notice limits mandatory rights. The service is intended for adults, and sensitive or unlawful uploads are prohibited under the acceptable-use rules.

Changes

This notice will be revised when the provider route, storage behaviour or public service changes. Review the date on this page and the notice shown at the point of collection before submitting new information.