PRIVACY NOTICE · SEPTEMBER 18, 2026

Your ideas.
Your private space.

This notice describes the current operation of AI Tattoo Generator.

What we store

We store your username, a salted password hash, a hashed recovery code, and account creation time. We do not ask for your email address. Session tokens are hashed before storage. A necessary, secure session cookie keeps you signed in for up to 30 days.

Your prompts and designs

To create an image, we send your tattoo description, style, and placement preferences to Runware, which processes the request using its image model provider. Avoid putting private information in prompts. Generated designs and their prompts are kept in your private Cloudflare-hosted history for up to 30 days and are not published to our inspiration gallery.

Security and limits

We use daily hashes of network addresses, request timestamps, and usage counters to limit abuse and apply free generation allowances. The application does not store raw IP addresses in its account database. Cloudflare and Runware may process request metadata under their own policies. Operational logs may record errors and request metadata.

Services we use

Cloudflare hosts the website, database, and backend. Runware and its image provider process generation requests. Google Fonts serves the typography and receives the network information needed to load fonts. Google Analytics measures visits and interactions such as page views, scrolling, and link clicks on our production website. It uses analytics cookies and processes device, browser, referral, and approximate location information. We do not send account usernames, passwords, recovery codes, tattoo prompts, or generated images as analytics event data. You can limit analytics through browser privacy controls or the Google Analytics opt-out browser add-on.

Keeping your work

Download any designs you want to keep. Your password and recovery code let you access your account; neither is recoverable by the site. Account records remain while your account exists. Generation records are cleaned up after 30 days and budget totals after 90 days.

External privacy information

See the Cloudflare privacy policy, Runware privacy policy, and Google privacy policy for the providers’ practices.