Privacy and data processing

Private photos, processors, payment records, recovery codes and video balances.

Oct 20, 2026

Updated 27 October 2026. This notice covers Burning Bridges Video at www.burningbridgesvideo.online. Contact support@burningbridgesvideo.online.

Photo handling

Selecting a photo creates a local browser preview. When you request an order, the browser converts it to JPEG, removes original metadata and limits the largest dimension to 2,048 pixels before a private upload. The server may save that upload before checkout, but does not call generation models without verified payment and a reserved video. Only upload a permitted photo of one consenting adult.

The candidate full-performance route uses Kie, GPT Image 2 for a personalised scene frame and Kling motion control for video. Earlier five-second recipes use their saved frame/video models. Kie processes the submitted photo and scene image; Cloudflare supplies application hosting, private media storage and the task database. Processing can occur outside your country. See Kie privacy information and Cloudflare privacy information.

Retention and deletion

Product photo and scene-frame copies are available for up to 24 hours. Completed private videos remain available for up to seven days from task creation. Scheduled cleanup removes expired media. A full-performance order can be deleted before generation or after a terminal result; an in-progress or uncertain render must be completed or reconciled first. Deletion cannot recall a processor request or erase your downloaded copy. Earlier orders retain their existing deletion controls.

Minimal task metadata can remain for up to 30 days for troubleshooting and service controls. A keyed hash of the network address is used for capacity limits, rather than its raw value in the task table. Pack purchase and use-ledger records are retained while needed to honor non-expiring balances, reconcile payments/refunds and maintain required financial records. Media deletion does not erase those records. Providers may retain their own service logs.

Payments

Stripe hosts checkout and receives card details. The studio records amount, currency, pack quantity, payment mode, hashed browser-owner reference, payment/session/refund identifiers, status and timestamps. It does not store full card details. See Stripe privacy information.

Google sign-in requests only your basic account identity: a verified email address, name and Google account identifier. It does not request access to your Gmail messages, contacts or Drive files. We store those identity details to associate this browser's orders and unused videos with your account, including across devices. We verify Google's identity response on the server and do not retain Google's access or refresh tokens. See Google's privacy policy.

A necessary secure HTTP-only cookie associates this browser with its balance and results for up to one year. A separate Google login session lasts up to 30 days; signing out revokes that session and gives the browser a new empty wallet. It does not delete paid videos from your account. Account-to-wallet links remain while needed to restore your orders and non-expiring balance. Contact support about account deletion and any outstanding balance.

The private encrypted recovery code restores its original browser wallet in another browser without extending media retention. It grants access to that wallet, rather than every wallet linked to a Google account. Restoring a code signs out the current Google session. Anyone with the code or an active browser session can access the associated results and balance. Keep it private. If you lose the original cookie and code and did not link the wallet to Google, recovery may not be possible.

The browser stores selected-order and checkout-request identifiers to prevent accidental repeat submissions. Photo previews are kept in memory, not written to browser storage by this workflow. Language and privacy preferences are stored separately.

Public demos and optional services

Customer photos or outputs are not published as examples without separate permission. The site's generated demonstration uses a fictional adult; downloaded reference demos are visibly labelled with external sources. Optional analytics require the privacy choice shown by the site. No advertising is enabled.

Contact

You may choose not to upload or contact support about access, correction or deletion with the order/receipt ID. Do not email photos, recovery codes, cookies or card details. This notice does not promise anonymity, perfect likeness or a processor retention policy beyond product copies described here.