Privacy Policy

We collect only what we need to run and improve the service:

• Account data: email address, display name, and a password hash (we do not store plaintext passwords). If you sign in with Google, we receive your Google account ID, verified email, and display name.
• Models and content: scripts you create or import, parameters, thumbnails, models you publish to Plaza, and share links.
• AI conversations: prompts, reference images, session history, and the code or previews produced to generate models.
• Usage and credits: model-call counts, token/credit ledger entries, and grants or top-ups.
• Technical data: IP address, browser type, timestamps, and request paths, used to operate Cloudflare Workers, debug issues, and keep the service secure.
• MCP access tokens: used so your own agent can access your cloud models. We store only a hash and a name. The secret is shown once at creation and stops working when you revoke it or delete the account.
• Local data: copies of scripts in IndexedDB and your language preference.

• Create and maintain your account, and send sign-in and password-reset emails.
• Sync cloud scripts, generate thumbnails, and support Plaza publishing and sharing.
• Send your prompts and reference images to AI models so they can generate or edit scripts.
• Measure usage, issue starter credits, and keep a ledger.
• Secure the service, prevent abuse, and diagnose failures.
• Improve the product and meet legal obligations, where allowed or required.

We use cookies and local storage that are necessary to run the service, and Google Analytics (gtag.js, measurement ID G-02YCRRBBP7) to understand how the site is used. We do not use third-party advertising cookies.

• sid: login session, HttpOnly, about 30 days.
• g_oauth: short-lived Google sign-in state, about 10 minutes.
• 3ddesign.locale: UI language preference, about 1 year.
• IndexedDB / localStorage: local model library and language preference.
• Google Analytics: cookies set by Google to measure page views and approximate traffic sources.

We do not sell your personal information. These processors are required to provide the service:

• Cloudflare: hosts Workers, the D1 database, R2 object storage, transactional email, and access logs / observability.
• Google: authentication if you choose Google sign-in, and Google Analytics for site usage statistics.
• OpenRouter and upstream model providers: process the prompts, reference images, and conversation context you submit so models can generate or edit scripts.

Models you publish to Plaza or share with a public link are visible to other users. We may disclose information when required by law, to protect rights, or to prevent serious abuse.

The service runs on Cloudflare’s global network. Your data may be stored or processed on servers outside your country, including outside mainland China. We rely on our providers’ security measures (encryption in transit, access controls, and processing limited to what is needed). Using the service means you understand and agree to these transfers.

• Account, cloud scripts, and ledger records: kept while the account exists.
• Sign-in and password-reset tokens: short-lived; deleted after use or expiry.
• Session cookies: up to about 30 days, or until you sign out.
• Worker logs: typically no more than 7 days.
• After you delete your account or we process a deletion request, we remove cloud data within a reasonable period. Residuals in backups and logs expire with their retention cycle.

Where applicable law allows (including China’s Personal Information Protection Law and similar privacy laws), you may access and correct your profile, export or delete your models, and request account deletion. The settings page lets you change display name, password, and language. Account deletion currently requires a request to the contact below; we will verify your identity before acting.

You may sign out, stop using the service, or decline to provide optional information at any time. If you withdraw consent or delete your account, some completed processing (for example already-public Plaza models or usage already recorded) may not be fully reversible.

The service is not directed to children under 14. We do not knowingly collect their personal information. If you believe we have, contact us and we will delete it promptly.

We use HTTPS, password hashing, HttpOnly session cookies, and Cloudflare access controls. No system is perfectly secure. Keep your email and password safe, and do not share one-time sign-in links.

We may update this policy. Material changes will be posted on the site with a new date at the top. Continued use of the service means you accept the updated policy.

Privacy questions: privacy@zaogemo.com. Website: https://www.zaogemo.com.