Privacy Policy

1. Scope

This Privacy Policy explains how DogDart (“we”, “us”) collects, uses, stores, shares, and deletes personal data when you use the Service. It applies to website visitors, account holders, and anyone who submits prompts, uploads, or payment information through DogDart.

Adult content context: the Service processes sexual content prompts and media. Use it only if you are 21+ and comfortable with that processing described here.

2. Controller and contact

Dogdart System Support operates DogDart and is the contact point for personal data collected through the Service, unless a processor notice says otherwise. Contact: [email protected].

3. Data we collect

3.1 Account and auth data

• username, password hash, role, account identifiers, JWT/session metadata;
• sign-in timestamps, IP address, user-agent, and basic security logs.

3.2 Generation and library data

• prompts, negative prompts, template IDs, model names, generation parameters;
• uploaded reference images and derived files;
• outputs, job status, error messages, credit debits/refunds, library folders/favorites.

3.3 Payment data

• package selected, amount, currency, invoice ID, payment status, timestamps;
• network, destination address shown to you, and any transaction hash you submit;
• we do not store wallet seed phrases; on-chain payments are visible on public ledgers.

3.4 Technical and diagnostics

• server logs, rate-limit counters, abuse signals, approximate device/browser info;
• optional cookies or local storage for auth and preferences.

3.5 Data we do not intentionally collect

We do not require government ID by default. If age assurance is enabled later, additional data may be collected under a separate notice.

4. Purposes and legal bases

We process data to:

• provide accounts, generation, library, and credit features (contract / legitimate interests);
• price, quote, charge, and reconcile credits and payments (contract);
• secure the Service, prevent fraud/abuse, and enforce Policies (legitimate interests / legal obligation);
• comply with law enforcement or lawful requests where required (legal obligation);
• improve reliability and safety systems using aggregated or reviewed signals (legitimate interests).

Where local law requires consent for certain cookies or marketing, we will request it separately. We do not sell personal data.

5. Sharing and processors

We may share data with:

• Infrastructure providers — hosting, databases, Redis, object storage, CDNs;
• AI generation providers — prompts/uploads/parameters needed to fulfill a job (outputs may be processed by upstream APIs);
• Blockchain networks — transfers you send are public on the chosen chain;
• Professional advisors and authorities when legally required or to protect rights, safety, and integrity of the Service.

Upstream providers have their own terms and may log requests. Do not submit data you are not allowed to share with processors.

6. International transfers

Servers and processors may be located in multiple countries. Where required, we use appropriate transfer mechanisms (e.g. contractual clauses) or rely on permitted derogations. Adult content processing may be restricted or unavailable in some regions.

7. Retention

• account data: while the account is active, then deleted or anonymized within a reasonable period after closure unless retention is required;
• generation jobs/outputs: while kept in your library or as needed for abuse investigation, billing disputes, or legal holds;
• payment records: as needed for accounting, fraud prevention, and legal retention periods;
• security logs: typically shorter rolling windows unless an incident requires longer retention.

8. Security

We use access controls, hashed passwords, transport encryption (HTTPS) where configured, and least-privilege operational practices. No method is perfectly secure. You are responsible for device security and credential confidentiality.

9. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, or export personal data, or to object to certain processing. Submit requests to [email protected]. We may need to verify the request and may retain data where law requires or where it is needed to establish/defend claims.

You can delete library items in-product where that feature exists. Account closure requests should be emailed if no self-serve deletion is available.

10. Children

The Service is not directed to anyone under 21. We do not knowingly collect personal data from minors. If we learn that a minor used the Service, we will terminate access and delete related data as required by law and our Age & Safety Policy.

11. Cookies and local storage

Essential storage is used for authentication tokens and session preferences. Analytics/marketing cookies are not enabled by default in the current build. If added later, this section will be updated and consent controls provided where required.

12. Changes

We may update this Policy by posting a new version. Material changes will update the “Last updated” date. Continued use after changes means you acknowledge the revised Policy.