UPDATED OCTOBER 23, 2026

Privacy Policy

Window Peeper AI is operated by TAO JUNLAN, an individual trading as Window Peeper AI, Hong Kong. Contact support@windowpeeper.site for privacy requests.

Photo preview and video creation

Selecting a photo previews it on your device. Watching or saving a reference demo does not upload that photo. Choosing “Create my video” sends the photo, selected quality and format to our server in the European Union and to APIMODELS for Wan 3.0 processing. APIMODELS passes inputs to its model infrastructure and providers; processing can occur outside the EU and Hong Kong. We do not promise a particular processing country or use your photo to train our own model.

We validate and re-encode the photo as JPEG, discarding embedded image metadata. Our temporary input copy is removed after the provider accepts the task, or when an attempt fails or is cancelled. Unconfirmed input copies are removed within one hour. Provider copies are separate from our storage: its documentation states generated media is retained for 30 days; we cannot guarantee earlier removal of its input copies. Contact support for processor-related requests. Do not upload sensitive images or photos of minors.

Your videos and settings

Generated videos are private to your signed-in account and available to download for 7 days after the request. Download a copy you want to keep. You can remove a video in My Videos; we remove our live media copy. Account deletion removes access and clears our media copies. Task metadata is kept for up to 30 days for delivery and support, then reduced to essential financial references. Deleting a video does not necessarily delete the processor's copy.

Saved reference-demo settings include the example, quality, format, random identifier and time. Anonymous collections use a necessary 7-day cookie; signing in links settings to your account across devices. Reference demos expire after 7 days. We store cookie hashes, not raw cookie values. Private database backups expire within 7 days. Generated media is not included in the routine database backup; keep your downloaded copy.

Community video references

Community preview images are served by this website. A TikTok player is loaded only when you choose to play a community clip; simply visiting a page does not load TikTok. The player connects to TikTok, which can receive your IP address and browser information and use its own cookies under its privacy practices. Opening the original post also visits TikTok. Your selected or uploaded photo is not sent to TikTok by this feature. Closing the player removes its embedded frame. Community clips are references from their credited creators, not customer results from this service.

Google sign-in

Google provides your account identifier, verified email and display name. We request only openid, email and profile, with no Gmail, Drive or contacts access. We do not store your Google password, access token or refresh token. A necessary signed-in session cookie expires after 30 days; temporary sign-in records expire after 10 minutes. Account details remain until you delete the account. Manage Google's separate connected-app record in Google connections; Google's own Privacy Policy applies to its service.

Payments and financial retention

Card information is entered directly on Stripe-hosted Checkout. This website stores order references, a buyer reference, amount, currency, payment status and credit adjustments; it does not receive full card numbers. Stripe processes payment and fraud information under its Privacy Policy. Essential transaction and credit-consumption records are retained for at least 7 years for accounting, refunds and disputes, and longer where outstanding credits, claims or legal duties require it. Account deletion removes the direct Google identity link but does not erase records required for these purposes or independently held by Stripe.

First-party website measurement

We measure visits to public pages, referral website domains, basic campaign labels, broad device/browser categories, page sections viewed, scroll depth, active viewing time and predefined actions such as choosing a pack or copying a prompt. Measurement goes only to our own EU server, with no third-party analytics, replay or advertising service. It does not record photos, typed text, prompt contents, emails, account identifiers, order identifiers, full URLs or payment details.

For an approximate daily visitor count, the server briefly uses the connection IP and broad browser family to create a keyed daily tag. Raw IP addresses and full user-agent strings are not stored in the analytics database. The random key exists in memory, changes each UTC day and is replaced on server restart; tags cannot be linked across days through this system. Shared networks, privacy tools and restarts can affect the estimate. Each page load also has a random in-memory identifier; no analytics identifier is stored in a browser cookie, local storage or session storage, or linked to your account.

Measurement records are retained for 90 days, with expired records removed hourly; routine private database backups expire within a further 7 days. Automated traffic is filtered where recognised. Browser Do Not Track and Global Privacy Control opt out. You can also disable optional measurement here; this stores only your off preference in a first-party cookie for one year.

Support and other data

Support email is handled in Microsoft 365. Send only information needed to resolve your request. Hosting can process standard connection and access information. This website has no advertising tracker or third-party analytics script. Local restaurant ad briefs are prepared in your browser and are not submitted to us. We do not log image contents, prompts or payment credentials.

Your choices

You can remove videos and demos, sign out or delete your account from Account. Deletion removes access to credits and history; contact support first about unresolved payments. For access, correction, deletion or complaints, email support@windowpeeper.site. Some financial or legally required records must remain. Applicable privacy rights and regulator complaint rights are preserved.