1. Who is responsible for your data
The encrevive.com website and the Encre Vive service are published by M Gironde, sole trader (French micro-entreprise), 19 Boulevard Lannes, 75116 Paris, France. For any question about your data: contact@encrevive.com.
Encre Vive offers two services: creating tattoo designs from a written description (Create mode) and animating a photo of a tattoo into a video (Animate mode). This policy describes, for each, the data processed, why, on what legal basis and for how long.
2. The data we process
Your account
Email address, display name, language, avatar (chosen among three preset thumbnails) and, if you fill them in, a short bio and an Instagram link. If you sign in with Google, Google sends us your email address and your name.
Purpose: create and manage your account, authenticate you. Legal basis: performance of the contract. Retention: as long as your account exists. You can request its deletion at any time (see section 6).
Your content
In Animate mode: the tattoo photo you upload and the video produced. In Create mode: the description you type, the chosen style and the image produced.
Your files are written to our storage by our server only: nobody can upload to it from a browser. Each file gets a random name (a UUID) that cannot be guessed, and is neither listed nor indexed. Its address is public and does not expire, however: that is a constraint of the generation engine, which has to be able to download your image to work on it. Anyone who is given that address can therefore open it.
Your images are never used for other purposes without your consent and are not used to train any model: generation is handled by AI providers (section 4). You retain full intellectual property rights to your work.
Purpose: produce the requested image or video and display it in your gallery. Legal basis: performance of the contract. Retention: your files and your generation history are kept until you delete your account (see section 6).
Credits and payments
Every credit movement (sign-up bonus, purchase, generation, refund) is logged with its amount, reason and date. When you buy, we record the order identifier, your email address, the amount, the currency and the order receipt sent by our payment provider. Your card details never pass through Encre Vive: they are entered at Lemon Squeezy, which is the merchant of record for the transaction.
Purpose: credit your account, handle refunds, keep our accounts. Legal basis: performance of the contract, then legal obligation for accounting records. Retention: the credit log, as long as your account exists; order records, ten years from the end of the financial year (French accounting obligation).
Technical data
Last login date, authentication logs (Supabase) and technical logs of the server that processes your requests (Render). These logs are used only to run the service, diagnose incidents and prevent abuse.
Legal basis: legitimate interest (security and proper functioning of the service). Retention: the last login date, as long as your account exists; technical logs, duration set by the provider (Supabase, Render).
Your feedback
If you answer the feedback form, we keep your answers (profile, difficulty encountered, wish), the language and the page you came from. These answers are not linked to your account.
Emails
We send you service emails (sign-up confirmation, password reset), sent through Supabase. We may also write to you, as an account holder, about the service itself: on August 30 and September 1, 2026, for example, we informed account holders that checkout had been repaired, that their credits had been refilled, and of a discount offer.
Legal basis: performance of the contract for service emails; legitimate interest for information about the service sent to account holders. Objection: you can decline this information at any time by writing to us, with no effect on service emails.
3. Cookies and trackers
On your first visit, a window lets you accept, refuse or customize trackers. No tracker subject to consent is set before you answer. You can change your mind at any time from the "Manage cookies" icon at the bottom left of every page.
| Category | What | Duration | Choice |
|---|---|---|---|
| Necessary | Your login session and the memory of your consent choice. Browser local storage, no third party. | Session: until you log out. Choice: 6 months. | Always active |
| Audience measurement | Google Analytics 4 (cookies _ga and _ga_MZYZQD18JB): traffic statistics. Data is sent to Google. | 13 months | With your consent |
At Google, audience measurement event data is kept for 2 months, and user-level data for 14 months, a period that restarts with each new activity of that user. Encre Vive uses no advertising tracker and no session recording tool.
4. Our providers
We never sell your data. It is entrusted only to the providers needed to run the service:
| Provider | Role | Data involved |
|---|---|---|
| Supabase | Database, authentication, service emails, file storage (servers in Paris) | Account, content, credits, payments, authentication logs |
| Render | Hosting of the server that processes your requests | Photos and descriptions during processing, technical logs |
| Hostinger | Website hosting | IP address and website access logs |
| Google (Gemini) | Analysis of your photo in Animate mode, image generation in Create mode | Uploaded photo, typed description |
| Alibaba Cloud (DashScope) | Video generation in Animate mode, backup image generation | Uploaded photo, animation description |
| Google (Analytics, Google sign-in) | Audience measurement with your consent; sign-in with a Google account if you choose it | Browsing data; email and name sent by Google |
| Lemon Squeezy | Payment, invoicing and merchant of record for packs and subscriptions | Email, billing and payment details |
| Brevo | Sending of information emails about the service, from the Brevo interface | Email address, name |
Google, Alibaba Cloud, Lemon Squeezy and Render are companies established outside the European Union: the data entrusted to them may therefore be processed outside the Union. You can ask us for details of the safeguards applicable to each.
5. Security
Exchanges between your browser, our website and our providers are encrypted in transit (TLS). Database access is restricted by row-level rules, and only our server can write to the storage space. Stored files, however, remain accessible to anyone who knows their address, as described in section 2.
6. Your rights
Under the GDPR, you can at any time request access to your data, its rectification, erasure, portability, restriction of processing, object to processing based on our legitimate interest, and withdraw your consent (for audience measurement, from the "Manage cookies" icon).
Deleting your account: the "Delete My Account" button on the Settings page immediately erases your login account, your profile, your credits, your generation history and all your files (images and videos). Payment records are kept without any personal data, solely for our accounting obligations; the invoice remains available from Lemon Squeezy. If the button is out of reach (no access to the account, subscription in progress), write to contact@encrevive.com from the address linked to your account.
To exercise your other rights, write to the same address. We reply within one month.
If you believe your rights are not respected, you can lodge a complaint with the French data protection authority (CNIL): www.cnil.fr.
7. Changes
This policy may evolve with the service. The last update date is shown at the top of the page; in case of a significant change, we inform account holders by email.