Privacy Policy

Last updated October 28, 2026

This policy explains what Dromana collects when you use Dromana, and why.

Account

If you sign in with Google, we receive the email, name, and avatar Google sends. If you use email codes, we store your email and a hashed one-time code until it expires. We don’t use passwords. Apple sign-in, while it is switched on, receives the email and name Apple shares. It stays off until an Apple developer account is connected.

We use your email to sign you in and, now and then, to tell you about new features and offers for your account. Every one of those emails has an unsubscribe link, and unsubscribing never affects sign-in codes or receipts.

Photos and clips

Uploaded photos and finished clips are stored on this service under your account so you can watch, download, retry, delete, or share a link. The render provider sees the photos long enough to make that one clip. We don’t sell your photos, and we don’t use them to train a public model on this product.

Payments

When you buy a plan or credits, Stripe and Link (Stripe’s reseller and the merchant of record) collect and process your payment details, billing address, and email under their own privacy policies. We never see your full card number. We keep your Stripe customer and subscription references, your plan, and your credit history so your account works.

How long we keep it

Jobs older than 30 days are deleted from the database and disk. Delete a clip or your account any time from the product. Session cookies last until you sign out or they expire.

Logs and limits

We store coarse rate-limit events (account id or IP, timestamp) so abuse limits survive a restart.

Cookies and analytics

Our own cookies: a sign-in session; a random device id that stops one person claiming the free credits twice; and, to count how people find and use the site, where your first visit came from (for example a search engine or a campaign link, kept 90 days) and which version of a page you’re shown when we test two. We count steps such as opening a studio or starting a render per browser per day, never tied to your account or your photos.

We also use Google Analytics (visits and how people move through the site) and Microsoft Clarity (heatmaps and session recordings, which show clicks and scrolling). Clarity masks what you type, and we mask your photos and results so they never appear in a recording. Both receive your IP address and browser details under their own privacy policies. In the EU, the UK and Switzerland they run without analytics cookies. Advertising features are off, and we don’t sell your data.

Sharing

A share link is an unguessable URL you create. Anyone with the link can play that clip until you delete it or it expires. Don’t post a link you don’t want public.

Contact

Privacy questions: hello@dromana.app.