privacy,
without the fog

We hold your email address, the media you upload and the media we generate, a record of what you bought and spent, and anonymous-by-default usage analytics. We never see your card details.

We do not sell any of it, we do not use your photos to train models, and we do not show them to anybody. Write to us and we delete the lot.

larpszn is operated from Slovakia, and the operator is the data controller for everything described on this page. For any question about your data, or to make one of the requests in the rights section below, write to support@larpszn.com.

We are small enough not to have a data protection officer, and not required to have one. That address reaches the person responsible.

• Your email address. That is the entire account. There is no name and no phone number. You sign in with a password we store hashed, or a six-digit code we email you (we store a hash of that code until it expires).
• The photos and clips you upload. Whatever is in the frame comes with them, including faces.
• The results we generate, and which upgrade produced each one.
• Your balance and your purchase history — which pack, what it cost, when, and the Stripe session it came from. Enough to reconcile a payment and to keep the tax records we are required to keep.
• Payment details, but not by us. Card numbers are entered into Stripe's own form and never reach our servers. We get back the amount, the currency, whether it succeeded, and an identifier.
• Usage analytics. Pages viewed, a short list of product events (signing in, starting an upload, submitting a generation, whether it worked, opening the pricing sheet, completing a top-up), plus the device, browser, referring site and any campaign parameters in the link you arrived through, and a country-level location worked out from your IP address.
• Crash reports. When the app breaks in your browser we get the error and where it happened.

We do not collect precise location, contacts, or anything from your device beyond the file you choose to send us.

• To give you the thing you asked for — your account, your library, running a generation, taking a payment. This is performance of our contract with you (GDPR Art. 6(1)(b)). Without this data there is no service.
• To keep the books. Purchase records are kept because tax and accounting law says to (Art. 6(1)(c)).
• To understand how the app is used, and to stop it being abused. Analytics, crash reports and rate limiting rest on our legitimate interest in a product that works and is not being farmed for free generations (Art. 6(1)(f)). You can object — see the rights section.

A photo of you is personal data, and if it shows your face it is a photo of an identifiable person. We do not run face recognition, we do not match faces between accounts, and we do not build a biometric template from anything you upload — so no special-category processing under Art. 9 is involved.

This is the part people actually want to know, so here it is without hedging.

Generation does not happen on our servers. When you press go, your file is uploaded to our model provider, WaveSpeed, which runs the model and stores both your original and the result on its own storage. Our database keeps the links to those two files and the details around them — which upgrade, what it cost, when — and your library is those links rendered back to you.

WaveSpeed processes that media to provide the generation and applies its own safety filtering to it. It acts as our processor for this purpose, on our instruction. We do not authorise it to use your media for anything else, and we do not send it your email address or anything else about you — a request carries the file and the instructions, nothing that identifies you.

Files served back into the app are proxied through our own origin behind your session, with caching switched off, so a link to your media is not something a third party can pick up in transit.

The complete list of companies that touch any of this, and what each one is for:

• WaveSpeed — runs the models, and stores the uploaded and generated media.
• Stripe — takes the payment and holds the card details and the payment record.
• Resend — sends the login-code emails, so it handles your email address.
• Supabase — hosts the database: your email address, balance, purchase history and the links to your media.
• Vercel — hosts and serves the app, and keeps short-lived request logs.
• PostHog — the analytics and crash reporting described above.

Nobody outside that list gets your data, and nobody on it is allowed to use it for their own purposes. We do not sell data, we do not share it with advertisers, and there are no advertising or social-media tracking pixels anywhere in this app.

Some of the companies above are outside the European Economic Area, or use infrastructure that is. Where data leaves the EEA it does so on the European Commission's standard contractual clauses or an equivalent transfer mechanism in the provider's own terms.

Analytics is configured to send to PostHog's EU region, and the database is hosted in the EU.

• Uploads and results: until you delete them, or until your account is deleted. There is no automatic expiry, because a library that quietly empties itself is worse than one you have to tidy.
• Your account and email address: until you ask us to delete it.
• Login codes: minutes. They expire, and expired ones are cleared out.
• Sessions: 30 days, then the cookie and the session record are gone.
• Purchase records: kept for as long as tax and accounting law requires, which in Slovakia is 10 years. These survive account deletion, because they have to — but they are reduced to the transaction itself.
• Analytics and crash reports: kept by PostHog under its own retention policy, currently up to 7 years for events.

There are two kinds, and no advertising cookies at all.

• The session cookie (larpszn_session). Strictly necessary: it is what keeps you signed in. It is set only after you sign in, it cannot be read by JavaScript, and it lasts 30 days.
• PostHog's analytics cookie. It holds a random identifier so two page views in a row can be recognised as one visit. Analytics requests go through /ingest on our own domain, which is a proxy to PostHog and not a separate tracker.

If you would rather not be counted, a browser-level tracker blocker or extension will stop the analytics cookie and the events. Blocking it does not affect anything in the app.

Analytics is only switched on where the operator has configured a PostHog key. If it is not configured, nothing is loaded and no analytics cookie is set.

Passwords are stored as scrypt hashes, never in plaintext. Signing in also works with a one-time emailed code; those codes are stored hashed and rate limited. Sessions are httpOnly cookies. We never receive card details. Your media is only served behind your own session.

No system is perfect. If something happens that puts your data at risk in a way that matters, we will tell you and the Slovak supervisory authority within the time the law allows.

Under the GDPR you can ask us to show you what we hold, correct it, delete it, hand it over in a portable form, restrict what we do with it, or object to processing based on legitimate interests — which is the analytics.

Two of those you can do yourself, right now:

• Delete one result. Every item in your library has a delete control. It goes immediately.
• See what we hold. Your library and your account screen are the whole picture, minus the purchase rows.

To delete everything, email support@larpszn.com from the address on the account with the word delete in it. We will confirm, then remove the account, the library, the uploads and the generated media, and instruct our model provider to delete its copies. We do it within 30 days and usually far sooner. Purchase records stay for the tax period described above; any credit left on the account is gone, so spend it first if you want it.

We will never charge you for a request or make you explain yourself. If you think we have handled your data badly you can complain to the Slovak data protection authority (Úrad na ochranu osobných údajov Slovenskej republiky) or to the authority where you live.

The app is for adults, the terms require you to be 18 or over, and photos of anyone under 18 must never be uploaded. We do not knowingly hold data about a child. If you believe we do, write to us and it will be deleted immediately.

If this policy changes, the date at the top changes with it. Anything that materially affects how we use data already collected gets an email to the address on your account first.

Everything on this page — support@larpszn.com.