Privacy Policy
What the Tintmill preview stores and why. Updated November 2, 2026.
Account information
The production studio uses Google sign-in to obtain your Google account identifier, verified email address and profile name. We request only sign-in, email and basic profile access. We use the identifier to associate uploads, jobs and billing records with your account. This does not give Tintmill access to your Gmail messages.
Sign-in cookies
The production studio uses an essential, secure sign-in cookie that expires after 14 days. Signing out revokes that session. A separate temporary cookie protects the Google sign-in request and expires after 10 minutes. These cookies are not used for advertising.
Prompts, images and results
Text drafts and output preferences are stored in this browser. Reference images can be retained in device-local storage so they survive a sign-in redirect. When you submit a generation, your prompt, settings, input image and mask are sent to Tintmill and then to SpicyAPI and the selected model provider for processing. Do not submit material you are not authorized to share with these services.
Server storage
Account records, job status, credit entries and billing references use Cloudflare D1. Submitted files and saved outputs use private Cloudflare R2 storage, accessed through account-authorized routes. An asset is not added to a public gallery automatically. The inspiration gallery contains editorial examples.
Payments
Production payments are disabled. A payment processor and its handling of billing information will be disclosed before checkout opens. Tintmill does not currently collect payment-card details.
Other services and analytics
The production studio uses Google for sign-in, Cloudflare for delivery and storage, SpicyAPI for enabled AI generation, and Microsoft 365 for support email. The selected model provider also processes generation inputs under its terms. The studio does not include advertising tags, session replay or third-party audience analytics.
Retention and deletion
Browser drafts remain on this device until you clear them or replace the uploaded file. You can delete individual server uploads and creation records through My Creations and My Account. Download copies you want to keep before deleting them. Financial records may need separate retention once billing is available; the production retention schedule must be confirmed before launch.
Your choices
You can use marketing pages without submitting a generation. Device-local tools do not require an inference provider. Account data access and deletion controls are available in the workspace. Contact support@tintmill.com about support, privacy or content concerns.