Privacy

Datenschutzerklärung · Last updated 10 October 2026

In short

• No account, no tracking, no analytics, no advertising cookies.
• One functional cookie identifies your browser so you get your weekly free credit and your own library.
• Your prompt history and studio settings are kept in your browser's local storage and never leave your device.
• Your prompts, uploaded images and generated images are stored on our server and sent to the AI model you choose.
• The operator can see all prompts and images — including those you don't share in the gallery.
• Images you share appear in the public gallery. You can unshare or delete them at any time.

Controller

Dustin Walker, c/o Alexander Thamm GmbH, Sapporobogen 6–8, 80637 Munich, Germany — bildwerk@dustinwalker.de

What we process and why

• Visitor cookie (bw_visitor, random ID, 12 months): to keep your library and enforce the free weekly budget. Strictly necessary for the service (§ 25 Abs. 2 TDDDG; Art. 6 (1) (b) and (f) GDPR).
• IP address: only stored as a keyed one-way hash, used to apply a per-network weekly budget and prevent abuse (Art. 6 (1) (f) GDPR). Your plain IP address is not stored by the app; the hosting provider may keep it briefly in server logs.
• Prompts, settings, uploaded and generated images: to generate images, show your library and — if you choose to share — the public gallery. The operator reviews generations to understand how the studio is used and to remove unlawful content (Art. 6 (1) (b) and (f) GDPR).
• Browser user agent: stored with your visitor ID to recognise abuse.
• Local storage (in your browser only): recent prompts and studio settings, so they survive a reload. This data is not sent to us; clear it via your browser settings (§ 25 Abs. 2 TDDDG).

Recipients

• OpenRouter, Inc. (USA) routes your prompt and reference images to the selected model provider (for example Black Forest Labs, Google, OpenAI, ByteDance, Alibaba, xAI, Recraft, Microsoft, Tencent). Providers outside the EU may process data in third countries; transfers rely on the EU-US Data Privacy Framework or standard contractual clauses where applicable. See openrouter.ai/privacy.
• Anthropic PBC (USA), via OpenRouter: when you use “Improve prompt”, your prompt and up to four reference thumbnails are sent to Anthropic's Claude model to rewrite the prompt. See anthropic.com/legal/privacy.
• Hosting: self-hosted on the operator's own server in Germany; no hosting provider receives your data.

Retention

Generations and uploads are kept until you ask for deletion. Deleting an image in your library removes it from your library and the gallery immediately; the operator may keep a copy for abuse prevention unless you request full deletion by email.

Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR), and to lodge a complaint with a supervisory authority. Because we don't know who you are, please include your visitor ID (shown in your browser's cookies) or describe the images concerned when you contact us.