The controller of your data is Coderuns, NIP 9212042321. Contact: hello@dittoshot.app.
What we store
- Your email address, to sign you in and send you service emails (sign-in links, welcome, top-up confirmations).
- The persons you create, their descriptions and the images generated for them.
- Your token history. Payment details are handled by Stripe; we never see your card.
- Short-lived security data: sign-in tokens, sessions, and the IP address used for rate limiting and bot checks.
Who processes it
- Cloudflare: hosting, database, image storage, bot protection (Turnstile).
- OpenRouter and the model providers it routes to (Google): image and text generation from your descriptions.
- Stripe: payments.
- Resend: email delivery.
- PostHog (data stored in the EU): usage statistics, see below.
Usage statistics
To see which pages work and where people get stuck, we use PostHog in a mode without cookies. In your browser it assigns you no lasting identifier: visits from the same day are linked only through a one-way hash of your IP address and browser, rotated daily. Once you have an account, our server also records what you do in the service (sign-ins, persons created, generations and their outcome, top-ups) under your random account ID, never your email address. If you arrived through a link with a campaign tag (such as utm_source), we keep that short tag in your browser's storage and attach it to your account when you sign up, so we know which channels bring people in. The basis is our legitimate interest (Art. 6(1)(f) GDPR) in improving the service. We keep these records while they help us do that, and delete them on request at hello@dittoshot.app.
Cookies
We set one session cookie to keep you signed in and one non-sensitive cookie that tells our public pages you're signed in. No advertising or analytics cookies.
Retention and your rights
Your data is kept while your account exists. Deleting your account (Account → Delete account) removes your persons, images and sessions immediately. We keep the token history as a payment record for as long as tax law requires. You can ask for access, correction or export of your data at hello@dittoshot.app, and complain to your data protection authority.