Privacy notice

Updated October 20, 2026

This notice describes how Zombie Couple Video processes information when you use the free preview or Story HD. The two flows have different storage periods described below.

Free preview: photos and video generation

Your original photos are displayed in your browser. Before submission, each complete photo is fitted onto a 1024 × 1024 JPEG with padding; it is not cropped. These prepared images and the selected scene are sent through our Cloudflare Worker to fal.ai for model processing.

The free-preview application does not store input photos in its KV database, Durable Object records or application logs. It requests that fal not retain the input/output JSON payloads using its documented retention control. This does not mean every provider copy is immediately deleted. fal’s processing is subject to its own policies and account settings.

Free preview: generated files

Generated videos are hosted by fal. We request a 24-hour media expiry and store a temporary result URL/status cache for up to 24 hours. Expiry timing is controlled by the provider. Media URLs may be accessible to anyone who possesses them; avoid posting a link publicly unless you intend to share it. Download promptly.

Session, verification and usage records

An essential, Secure, HttpOnly browser-session cookie helps restrict access to a generation task to the browser that requested it. The cookie expires after 24 hours. Cloudflare Turnstile checks for automated submissions and may process technical browser information.

We use a keyed hash of your IP address for daily quotas and event rate limits; the application does not save the raw IP in these records. Per-IP generation counts are stored in Cloudflare Workers KV with expiration shortly after the daily reset. The global allowance and pause state are stored separately in a SQLite-backed Durable Object. Private operational records track submissions, outcomes, anonymous page visits, upload, generate-click and download-initiation events and estimated model costs for approximately 30 days, with daily cleanup. Attempt tokens expire after 24 hours; attempt records are removed by periodic cleanup, ordinarily within the following day. The application’s event payloads exclude photos, prompts, original filenames and video URLs. Browser event counts are approximate and do not identify a person. Session-stage counts group these events using a keyed session hash. Download initiation does not confirm that a file was saved on your device. Costs shown in operational reports are estimates, not provider invoices.

Task recovery on your device

We save the latest task credential, attempt identifier and creation time in your browser’s local storage for up to 24 hours. We do not save selected photos there. Returning in the same browser can resume progress or reopen the result, provided its session cookie and temporary result are still valid. Clearing site data removes access. Use Make another or Forget this task to remove the saved credential sooner. Our background process checks submitted tasks even when the page is closed; it never submits a new generation.

Story HD: private photos, delivery and payment

For Story HD, we save the two prepared JPEG references in private Cloudflare R2 storage before checkout. They are removed after successful submission to the model provider, or within approximately 24 hours for incomplete or exceptional orders. The generated video is copied into private storage. Your order and video are accessible for 7 days from order creation, then access expires and scheduled cleanup removes the stored media. These files are not published in a public R2 bucket.

A separate Secure, HttpOnly session cookie and a private recovery link control order access. The recovery credential is stored in your browser; our server stores its hash. Anyone holding the full recovery link can access the order, so keep it private. A hashed IP-derived identifier is used to limit recovery attempts. Refund-related records are kept for 30 days in the application for reconciliation; financial records retained by Stripe follow its own policies and applicable requirements.

Stripe handles checkout, payment details and payment receipts. We store payment references, order state, amount and refund status; our application does not receive full card numbers. We do not currently send completion emails. See the Stripe Privacy Policy.

Limited traffic attribution

We use first-party, approximate traffic measurements to understand which pages help visitors create a video. A random tab identifier and first-touch labels are kept in session storage for up to 24 hours. We record a recognized source category (such as ChatGPT or Google), an approved campaign label, a public landing-page path and the browser language. We do not send complete referring URLs, URL query strings, recovery links, photos or email addresses to this measurement endpoint. Unknown referring domains are grouped as other referrals.

Visits and client-side actions are approximate, not counts of people or AI recommendations. Source labels on a new paid order are frozen at preparation; payment and refund counts use server-confirmed state. Private attribution summaries and reduced order snapshots are kept for about 30 days, with periodic cleanup. They do not contain photographs, recovery credentials or payment card information.

Global Privacy Control and Do Not Track disable this traffic-attribution collection. You can also disable traffic attribution in this browser, or enable it again; this choice is saved on your device. Essential payment, delivery, abuse-prevention and operational records still apply. Attribution is not shared with an advertising network.

Your choices

Upload only adult portraits you have permission to use. You can read the guide without uploading photos. Removing a selected photo clears its local preview, but cannot recall a photo that has already been submitted to the provider. Do not upload confidential or sensitive images.

Questions

Use our contact page for privacy questions. Please do not send portraits or API credentials with a support request.

Provider information: fal privacy policy, fal retention controls, Cloudflare privacy policy.