Draft pending legal review. This text may change before the commercial launch of Vortex Thumbs.

Privacy policy

Last updated: September 2026

This policy supplements the privacy policy of vortexstudio.fr and describes the processing specific to Vortex Thumbs.

1. Controller

Vortex Studio (Micro-entreprise), SIRET 94340681900012, Rue du Centre, 38510, Courtenay, France. Contact: hello@vortexstudio.fr.

2. Data we process

DataSourcePurpose
Account: email, display name, avatar, authentication identifiersYour Vortex account (shared with vortexstudio.fr)Sign-in, credit balance, receipts
Prompts, form inputs, chosen skins and weapons, style settingsEntered by youBuilding the request sent to the model; your generation history
Uploaded references (map screenshots, thumbnails, sketches)Uploaded by youSent to the model as references for your generation
Generated images (original PNG, Epic JPG)Produced by the modelDelivery, history, edits and variants
Orders and credit ledger: pack, amount, PayPal order and capture identifiers, datesPayPal and the ServicePayment, accounting, fraud prevention
Technical logs: IP address, user agent, timestamps, error messagesYour browser and the ServiceSecurity, rate limiting, debugging

We never receive or store your card number: payment is handled entirely by PayPal.

3. Legal bases

Performance of the contract (account, credits, generation), compliance with legal obligations (accounting records) and our legitimate interest (security, fraud prevention, improvement of the Service). Public display of a generated image in the gallery is based on your explicit submission of that image.

4. Processors

ProcessorRoleLocation
Google (Gemini API)Image generation and prompt enhancement: your prompt and reference images are sent to Google to produce the image. Under Google's paid API terms in force at the time of writing, this content is not used to train Google's models.Google infrastructure; processing may take place outside the European Union under Google's contractual safeguards
SupabaseDatabase, authentication, file storageEuropean Union
PayPalPayment processingPayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg
VercelHosting of the web applicationServer functions in the European Union (Dublin); global edge network for static assets
ResendTransactional emails (account, receipts)United States, transfer framed by standard contractual clauses

5. Retention

  • Uploaded references: deleted 30 days after upload.
  • Original PNG: deleted 30 days after generation.
  • Epic JPG (1920x1080): deleted 90 days after generation.
  • Gallery copies: kept while the image is in the public gallery, removed on request.
  • Generation history (prompt, settings, cost, without the files): kept while the account is active, deleted or anonymised when the account is closed.
  • Orders and credit ledger: kept 10 years as accounting records (French Commercial Code).
  • Technical logs: up to 90 days.

Download the images you want to keep before these deadlines: the Service is not an archive.

6. Your rights

You may access, rectify, erase, restrict or port your data, and object to processing based on our legitimate interest. You may withdraw an image from the public gallery at any time. Write to hello@vortexstudio.fr; we answer within one month.

Closing your account deletes your images, references and history. Orders and the credit ledger are kept for the legal accounting period.

You may lodge a complaint with the CNIL (cnil.fr).

7. Cookies

The Service uses only strictly necessary cookies: a session cookie (Supabase authentication) and a language cookie (vortex-locale). No advertising, analytics or cross-site tracking cookie is set. Because these cookies are essential to the Service, no consent banner is required.

8. Changes

We may update this policy. The date of the last update is shown at the top of this page.

9. Contact

Vortex Studio, Rue du Centre, 38510, Courtenay, France. Email: hello@vortexstudio.fr.

Questions about this document? Write to hello@vortexstudio.fr.