Privacy Policy

We collect account details such as your email address, profile information, sign-in records, and credit balance.

When you use the generator, we store the text you submit, selected tattoo options, generated images, saved designs, and share links you create.

Payments are handled by Waffo Pancake, operated by Waffo.com Limited, our merchant of record and payment processor. You enter your card details on Waffo's checkout; we never see or store your full card number. We keep the purchase records needed for credits, receipts, support, and compliance: what you bought, the amount and currency, the payment status, and Waffo's order and payment reference numbers.

We use Google Analytics to measure which pages and features are used. It sets cookies and records usage events such as page views, preview starts and downloads. You can block analytics cookies in your browser or with a content blocker; the site works without them.

To offer free previews without an account, we store a hashed form of your network address and browser details for seven days so the free allowance can be counted. Free previews and account sign-up use Cloudflare Turnstile, a security check that may set a cookie to tell people apart from automated traffic.

Sign-in uses a session cookie that keeps you logged in. It is not used for advertising.

We use Microsoft Clarity to see where people get stuck so we can fix the generator, account and sharing pages. Clarity makes session recordings and heatmaps: it captures clicks, taps, scrolling, mouse movement and the page content you see, so we can replay a visit.

Text you type into input boxes and the choices in drop-down menus are masked before anything leaves your browser, and numbers and email addresses shown on a page are masked as well. Other content on the page is recorded as it appears, which can include your own idea text when a result page shows it back to you. Clarity does not run on our admin area or on the password-reset, email-verification and sign-in callback pages, whose links carry one-time codes, and it does not run for our own staff while they are signed in as site administrators.

Microsoft processes Clarity data under the Microsoft Privacy Statement (https://www.microsoft.com/privacy/privacystatement). Microsoft keeps recordings for 30 days; recordings we mark as favorites and a random sample can be kept for up to 9 months.

Clarity sets two cookies on our site: _clck, which keeps a pseudonymous Clarity user ID for 1 year, and _clsk, which joins the pages of one visit into a single recording for 1 day. Microsoft may also set its own cookies on the clarity.ms domain, such as MUID and CLID, under its own policy.

Clarity runs when a page loads; we do not ask for consent first. For visitors Microsoft locates in the European Economic Area, the United Kingdom or Switzerland, Microsoft does not use Clarity cookies unless the site sends a consent signal, and we do not send one, so for those visits Clarity collects page views and basic interactions without full recordings or linking pages together. You can stop Clarity by blocking cookies or blocking clarity.ms with a content blocker; the site works without it.

Photos and sketches you upload, and every image our AI image service makes for you, are checked by SeeAPI's content moderation service before they are used or shown. SeeAPI reads an uploaded photo through a private link that works only while the check needs it and expires within 10 minutes; a generated image is read from the image service's result link. Images are sent without your name or email address.

If the check stops an image, nothing is generated from it or shown, and no credits are used. If the check service is briefly unavailable, an image may be shown first and checked later; an image a later check removes is no longer shown or shared, and its credits are returned.

We use your information to provide previews, save designs, protect private results, manage credits, improve product quality, and respond to support requests.

We may use aggregated product analytics to understand which features are working, but we do not sell your personal information.

Concepts you make with credits are private to your account unless you create a share link. A free concept can be opened, read-only, by anyone who has its link; it is not listed on the site or shown to search engines. Public gallery images are curated separately.

When you start a checkout, we send Waffo your account email address, your account ID, an order number and the plan or credit pack you chose, so it can take the payment and tell us when a payment succeeds, a subscription renews or is canceled, or a refund is made. Waffo collects your payment details and billing country itself and handles them under its own privacy policy (https://www.waffo.ai/en/privacy).

We keep account, credit, and generation records for as long as needed to provide the service, meet legal obligations, resolve disputes, and prevent abuse.

To make a design, the text you type, the options you choose and any image you upload are sent to the AI image and text services listed in our Acceptable Use Policy at /acceptable-use: Google Gemini and OpenAI models reached through APIMart, Anthropic Claude models reached through APIMart or Kie.ai, and Bria background removal through fal.ai. These services process that content to return the result to us. We do not sell it or use it to train AI models.

Before a design is made, the text you type, together with the options you chose, is checked against our own list of blocked terms and then sent to SeeAPI's text moderation service, which scores it for sexual content, content that sexualises minors, hate, harassment, self-harm and violence. Only that text is sent, not your name or email address. If the check flags the text, nothing is generated and no credits are used; if the check cannot run, you are asked to try again and nothing is generated. Images are checked by SeeAPI as described above.

You can see and change your profile in Settings, and see the designs saved to your account in Settings → My designs.

You can ask us for a copy of the personal information we hold about you, to correct it, to delete it, or to close your account, by writing to support@patchwork-tattoos.com from the email address on your account. When we close an account we delete its sign-in details, saved designs and generated images; we keep purchase and credit records only as long as the law or a payment dispute requires. We reply within 30 days.

Depending on where you live, you may also have the right to object to or restrict some uses of your information, and to complain to your local data protection authority.

Patchwork Tattoos is intended for adults and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact support@patchwork-tattoos.com and we will delete it.

For privacy questions or account requests, contact support@patchwork-tattoos.com.