Privacy Policy

Overview

This site is an old photo restoration tool. This policy explains what data is handled when you use it, in plain language. It describes how the live site works today and is updated before any change to how photos or personal data are handled.

Photos you choose in the tool

When you select a photo in the tool, it is first validated and previewed in your browser. When you press restore, the photo is uploaded to this site's server for independent decoding, safety review and processing. Real processing requires Google sign-in. The provider output is safety-reviewed before it is copied into site-owned private storage or made available for download; otherwise it is not delivered through this site and the request fails closed. Provider copies follow the separate retention periods below.

Which provider would process photos: SeeAPI performs the server-owned task and image safety reviews, Kie Nano Banana 2.1 performs the selected restoration, and the generated result is checked again before private persistence or delivery.

Whether photos are saved, and for how long: Production uploads are usable from owner-scoped private R2 for up to 15 minutes. Paid restored results are downloadable and free watermarked previews are viewable from private R2 for up to 60 minutes. After those access windows the objects are rejected and become eligible for physical deletion; normal restoration requests trigger small background cleanup batches. Independently of site traffic, R2 lifecycle rules mark uploads and results for deletion one day after creation. Physical removal is asynchronous: Cloudflare typically deletes objects within 24 hours after their expiration time, but it can take longer. We do not promise physical deletion within 24 hours of upload. Terminal request and cost-ledger records become eligible for deletion by subsequent request-triggered cleanup after 30 days; they contain request state and cost-control metadata, not the photo bytes. Unresolved task receipts and cost records are kept until reconciliation, then follow the terminal retention window. SeeAPI receives the submitted image for safety review and Kie receives the input for restoration. Its temporary upload links are accessible to anyone who has the URL; Kie documents deletion of uploaded files after 24 hours, generated media after 14 days, and provider task logs after 2 months. We do not expose its temporary links in the application. This site cannot immediately delete provider-hosted copies; private R2 deletion does not delete those copies.

The bundled sample photos are public-domain images served with the site itself; they involve none of your data.

Photos of children. You may upload photos that include children only if you are their parent or guardian or have permission. We use uploaded photos only to create the restoration you requested. We don't run face recognition or age detection, and we never sell photos or use them to train models. Our copies of uploads stop being accessible after 15 minutes and results after 60 minutes, and storage expiry removes them within about two days; our restoration provider Kie keeps its own copy of uploads for up to 24 hours and of generated images for up to 14 days. Email hello@heirloompix.com to delete them sooner; we delete our copies within 24 hours of a valid request. Each restoration also records when you ticked the photo-permission box and which version of these terms it confirmed.

Account data

Email/password registration is disabled. Real processing requires Google sign-in. The site stores the basic Google account fields needed for authentication (including email, display name and profile image when supplied), session records, and an owner-scoped request/cost ledger used for quota, idempotency and abuse control. Free restoration requests also use Cloudflare Turnstile verification to limit automated abuse.

Abuse prevention

When real restoration is enabled, Cloudflare Turnstile verifies requests in invisible mode. It processes browser and device signals for bot detection. See the Cloudflare Turnstile Privacy Addendum for details. Tokens are checked on our server before processing; Turnstile does not receive your uploaded photograph from our application.

Payments

Checkout is provided by Stripe. Stripe receives the account and payment details needed to complete the purchase; this site does not receive or store the full card number. The site stores its own order number, Stripe transaction and session identifiers, payment status, amount, currency, account email, timestamps, and any invoice URL supplied by Stripe so credits can be granted once and payment records can be reconciled.

Analytics and cookies

We use three analytics tools to see how the site is used and where it can improve. No advertising scripts run on this site. Essential authentication cookies are used when Google sign-in is active.

• pvuv.ai counts page views and visits on every page, in every region, as soon as the page opens. It does not require a consent choice.
• Google Analytics 4 and Microsoft Clarity (page usage, clicks and anonymized session replays). Visitors in the EEA, the UK and Switzerland see a banner, and neither tool loads until they click Allow; Decline, or a failed region check, keeps both off. Elsewhere both are on by default. Anyone can change their choice with the "Privacy settings" link in the footer; turning analytics off stops both tools and removes their cookies (_ga*, _clck, _clsk).
• Photos you upload are never sent to these analytics tools.

We remember a limited first-visit source in your browser's local storage: a recognized referral service or campaign source, a public landing page, and browser language. We use it to understand which channels lead to purchases and include these fields with Stripe checkout metadata. We do not copy referrer paths, query strings, email addresses or chat identifiers. Records are used for 7 days, then replaced on your next visit. You can remove this record by clearing this site's browser storage.

Changes to this policy

Any change that affects how photos or personal data are handled will be published on this page with a new "last updated" date before the related feature is enabled.

Contact

Questions about privacy can be sent to hello@heirloompix.com or via the contact page.