Privacy Policy

Last updated: 10 October 2026

Rumpelstiltskin Video operates Rumpelstiltskin Video at rumpelstiltskinvideo.org. This page describes what actually happens to your data when you use the site.

Your account

To make videos you sign in with your Google account or with your email address. With Google, Google confirms your email address to us and we receive your email, name and profile picture, nothing else from your Google account. With email, we send a one-time code to that address. We store your email, your video balance, your purchase records and a log of your videos (time, soundtrack choice, model, status). This data is stored on our server in the Netherlands.

After you sign in, your browser keeps a sign-in token in local storage so you stay signed in. The site sets no cookies.

Your photos and videos

• Your browser checks each photo and, if it is very large, shrinks it to 2048 pixels on the long side before anything is uploaded.
• When you start a video, the two photos are uploaded straight from your browser to private storage operated for us by Cloudflare (R2). Only your account can see them, through short-lived links.
• Our server sends short-lived links to the two photos and to the trend scene to APIMart, an AI model provider, which runs MiniMax's H3 video model to film the scene with the people in your photos. The provider and the model apply their own safety checks, which can decline a photo. The finished video is copied back into our Cloudflare storage.
• Your photos and finished videos are deleted 30 days after upload. You can ask us to delete them sooner.
• We do not use your photos or videos to train AI models, and we do not show them to anyone else. Examples on this site use AI-generated sample faces, never customer photos.

Upload only photos of people who agreed to be in the video. Do not upload photos of children.

Payments

Purchases are processed by Stripe. Stripe receives your card details directly; we receive the payment status, amount and a reference. We keep purchase records as long as accounting and tax law require.

Emails

We send sign-in codes and, if you buy, service messages from no-reply@rumpelstiltskinvideo.org. Replies go to contact@rumpelstiltskinvideo.org. We do not send marketing email unless you agree to it, and every marketing email has an unsubscribe link.

Analytics

We count visits with a self-hosted, cookie-free analytics tool. For each page view it receives the page path, the referring page, browser and device type, screen size, language and country-level location. It does not set cookies, never receives the part of an address after a # sign, and respects Do Not Track.

Service providers

• Cloudflare: serves the site, stores photos and videos, sends and receives email for rumpelstiltskinvideo.org.
• APIMart and MiniMax: run the H3 video model that makes your video.
• Stripe: payments.
• Google: confirms your identity if you choose to sign in with Google. When you are not signed in here, pages load Google's sign-in script so Google can offer a one-tap "Continue as" prompt if you are signed in to Google in this browser. Google handles that prompt; we receive nothing unless you choose to continue. You can dismiss it, and Google stops showing it after you close it a few times.

How long we keep data

Photos and generated videos: 30 days. Account, balance and video logs: while your account exists. Purchase records: as long as the law requires. Emails to us: as long as needed to answer and follow up.

Your rights

You can ask for a copy of your data, a correction, or deletion of your account and files by writing to contact@rumpelstiltskinvideo.org from your account email. If someone used your photo without your permission, write to the same address and we will delete it and the videos made with it. If you are in the EU or UK you can also complain to your data protection authority.

Children

The site is for adults. It is not directed to children under 16, we do not knowingly create accounts for them, and photos of minors are not allowed.

Changes

We update this page when our practices change and show the date above.