Privacy Policy
Optional first-party measurement
Analytics starts automatically on your first public-page visit. Use Analytics settings on a public page to turn off first-party analytics, Google Analytics and Tag Manager, Microsoft Clarity and Plausible for this browser. Your choice also applies on later visits until you turn analytics on or clear site data. A first-party cookie links visits for up to 30 days and can connect them with your signed-in account. We exclude private URLs, photos, prompts and form contents. Turning analytics off stops new optional observations. Account, order and payment records needed to provide the service are still kept.
Self-hosted traffic statistics
We use self-hosted Plausible at pla.chenwenjian.com to measure permitted public-page visits. It does not use cookies or session recordings. Requests include the public path, referring site origin and standard network/browser information, processed on our server in the United States. We strip query strings and fragments and do not send uploads, form contents, prompts, account, order or task identifiers. Private pages are excluded.
Who operates this site
Chen Wenjian, an individual operating in China, operates TatTryOn at tattryon.com and is responsible for the personal information described here. Contact support@tattryon.com for privacy requests. This is a service for adults aged 18 or older. We do not knowingly collect children’s information; contact us if you believe a child has submitted personal data.
Classic photos and local storage
Classic processes uploaded body photos and tattoo designs in your browser. The Classic editor does not upload those images to our servers or AI processing services. Your local draft is kept in IndexedDB and expires after 24 hours without editing; it is removed the next time you open the editor. You can delete it from the Adjust panel. Downloaded files remain on your device.
AI tattoo idea consultations
The tattoo meaning advisor sends your story, selected preferences and relevant reference context to a third-party AI service to suggest designs. Do not submit sensitive personal information. Consultation results are restricted to your account or guest session and expire after 24 hours; expired records are removed by scheduled maintenance. Drafts remain in this browser tab for up to 24 hours and can be cleared in the advisor. We store request identifiers, hashed ownership and short-term usage counters for free access to prevent duplicate calls and enforce free-use limits. Provider logs and retention follow their own policies. Classic body photos are not sent to the advisor. Recent facts and cultural interpretations may need independent verification.
Accounts and AI designs
Google sign-in through Neon Auth provides your account identifier, email and display name. Neon stores account information, balances, orders and generation usage. Our database retains generation prompts, style and color choices, task status, cost and result references. AI generation sends your prompt, chosen style and color mode to third-party services for content screening and, after approval, image generation. Do not include sensitive personal information in a prompt. These service providers process that information under their own terms and privacy practices. Generated image URLs are sent to a third-party content safety service for screening before results are stored as user assets or made available for download. Classic body photos are not sent to these screening services. Moderation task identifiers and decisions may be retained in operational logs; provider retention is governed by its own policies.
Photo-based tools
Local stencil conversion, lettering previews and budget calculations run in your browser. Stencil and image-to-tattoo selections are saved locally for up to 24 hours to support sign-in recovery. Selecting AI generation uploads the reference to private storage and sends the image with your instructions to third-party services for input screening and AI generation. The same result screening described above applies. Uploaded reference images become inaccessible after 30 days and are removed by scheduled maintenance. We do not publish them as gallery examples. Only upload images you have permission to use.
Private images and retention
Generated images are kept in a private Cloudflare R2 bucket and served after account authorization or through short-lived signed links. Unsaved generated images become inaccessible after 30 days and are removed by scheduled maintenance. Saved-project retention may differ where clearly indicated. Saved projects and their associated images are retained until deletion. Account records are retained while the account is active. After a verified closure request, ordinary account data is scheduled for deletion or de-identification within 30 days. Generation input records are reviewed manually for deletion or de-identification within 90 days of completion. Support correspondence is normally retained for 12 months after resolution. Transaction and associated credit-delivery evidence are normally retained for 3 years after completion or dispute resolution, whichever is later; active credit entitlements and records required by law are retained longer. These record-retention processes are manual and do not imply automatic deletion from provider logs or backups.
Security and fair use
We use a keyed hash of the IP address to apply free-use request limits and the daily free-generation allowance. These hashes are removed from free-generation task records by scheduled maintenance after 7 days; we do not store the raw IP address in these records. We do not use canvas fingerprinting. Short-term limit records are cleared by scheduled maintenance. Vercel hosts the service and may process request information needed for hosting and security.
Site analytics
We use Microsoft Clarity to understand page visits and interactions, including clicks, scrolling, and session replays. Clarity may use cookies and receive technical information such as your browser, device, IP address, page URL, and interaction data. We mask the Classic preview, AI generation and consultation areas, and account area from Clarity recordings. Classic body photos remain in your browser and are not deliberately sent as image files to Clarity. Google Analytics 4 measures visits and traffic sources and may receive page URLs, device and browser information, and interaction events. Google Tag Manager loads our tag container; adding other measurement tags requires a separate review and an update to this notice. You can block or clear analytics cookies in your browser. See our Cookie Policy for details.
Payments and your choices
Starter and Creator one-time credit purchases are offered through the checkout linked from our pricing page, subject to current availability. Waffo handles hosted payment details; TatTryOn does not collect or store full card numbers or CVCs. We use service providers for hosting, authentication, storage, AI generation, content safety screening and payment processing. They receive the information needed to perform those services. The operator is in China; service providers may process data in the United States and other countries. Applicable provider agreements and legally required safeguards govern transfers; we do not promise a single storage country, universal zero retention or that all providers exclude training. We do not use your content to train our own models. Contact us to request access or deletion, subject to records we must retain. We do not sell personal information or share it for cross-context behavioral advertising. We do not publicly publish your private designs. Necessary information may be disclosed to meet lawful obligations or resolve security and payment disputes.
Purpose and legal basis
We process account, generation and payment information to provide the service you request; support and security records to address problems and protect users; and required transaction records to meet legal obligations. Site analytics helps us understand and improve use of the service. Where applicable law requires consent, that requirement applies. We do not currently run advertising analytics or a promotional mailing list. Essential service messages are separate from marketing.
Your rights and security
Depending on applicable law, you may request access, correction, deletion, portability, restriction or objection, withdraw consent, or complain to your local privacy authority. Email us from your account address; we request only the information needed to verify your request. We normally respond within 30 days, within one month where GDPR applies, or sooner where required. Any lawful extension will be explained within the original period. We use HTTPS, account authorization and private image storage, but no system is risk-free. Security incidents are assessed and notified under applicable law, including the 72-hour supervisory notification rule where it applies.
Policy changes
We update the date and version when this policy changes. Material changes will normally be announced on the website at least 14 days before taking effect, and affected users will be contacted where required. Urgent legal or security changes may take effect sooner.
Contact and feedback
Email support@tattryon.com. Include a job or order ID where relevant; do not send card numbers, passwords or private keys.
Send feedback →