Privacy

What we keep, who handles it, and when it’s deleted

Last updated November 2, 2026

What we collect

• Room photos you upload. Before upload, your browser re-saves the photo, which drops the location and camera details phones store inside pictures. Our server removes any that remain before storing it.
• The restyles made from them, and the style and options you tapped for each.
• A signed visitor cookie. One cookie that lets the site count your free restyle and show it back to you. It holds no name or email, and it isn’t used for advertising.
• A scrambled form of your IP address. To stop the free restyle being claimed over and over, we keep your IP address only as a hash made with a secret that changes every day. The hash can’t be turned back into your address, and because the secret changes daily, one day’s hash can’t be matched to the next. Raw IP addresses are never stored.
• Your email address, if you buy the pass. Payments are handled by Stripe, which passes us the email you gave at checkout. We use it only to help you when you email us about your order, such as a lost studio link or a refund. We never see your card number.
• Your studio link, kept only as a scrambled (hashed) form, so the link itself isn’t stored in our database.

We don’t ask for your name, address or phone number, and there is no account.

How your photos are used

Your photos are used only to make your restyles. Each upload goes through a room check, which turns away photos that show people or aren’t of an indoor room, and then through the restyle for the style you tapped. There is no free-text prompt.

We don’t sell your photos, make them public, or use them to train AI models. Photos are not written to our logs.

Who processes it

• Cloudflare hosts this site and runs the app. The room check and the restyles run on Cloudflare Workers AI. Images are stored in Cloudflare R2, a file store, and records such as your pass, its restyle count and your checkout email are stored in Cloudflare D1, a database.
• Stripe handles payments for the pass.

No other AI company receives your photos or restyles.

Who can see your restyles

Your free restyle is tied to the visitor cookie in your browser. A pass lives behind a private studio link, a long random code with nothing personal in it. Anyone holding that link can open your studio, so share it only with people you’d trust with a house key. If you shared it by mistake, replace it with a new link from the studio; the old one stops working.

When it’s deleted

• Free restyle: the photo and the restyle are deleted within 24 hours.
• Pass: everything in it is deleted 30 days after purchase.
• Any time: delete a single restyle, or tap Delete everything in your studio to remove the pass’s photos, restyles and records at once. It can’t be undone.

Backups

Cloudflare’s database keeps point-in-time recovery copies, called D1 Time Travel, so it can be restored after a failure. Deleted database rows can remain in those backups for up to 30 days, and then they are gone. Images are not stored in the database, so they are not in those backups.

Stripe keeps its own record of the payment, which tax law requires. For anything else, such as removing your email without deleting your studio, email us.

No ads, no selling

We don’t sell or rent anything about you, we don’t show ads, and this site has no advertising trackers.

Analytics

We use Cloudflare Web Analytics to count visits to these pages. It sets no cookies, stores nothing in your browser and doesn’t fingerprint visitors. We see only totals, such as pages viewed, the site that referred you, country, browser and device type.

Campaign links

If you arrive from a link with campaign tags (the “utm” part of a web address), the page keeps those tags in your browser for this visit and passes them along when you open the restyle page, so we know which video or post sent you. They’re cleared when you close the tab.

Contact

Questions about your data, or a request to see what we hold: email us.

This site is run by the makers of Restyle This Room.