Privacy Policy
Updated October 23, 2026. Version 2026-10-23.2. This policy explains what CostumeFlip (costumeflip.com) processes, which providers process it, and for how long.
1. Operator and contact
CostumeFlip is operated by Chen Wenjian, an individual operator in China, who is the data controller for this service. Privacy requests, deletion, safety reports and support: hello@costumeflip.com.
2. Information we process
Guest session identifiers and cookies, or your account name, email and authentication identifiers if you create an account; the photos you upload; generated videos; job and credit records; payment references, amounts, status and the email you give at checkout; support emails; and security logs such as IP address, browser metadata and request times. Full card details are handled by Waffo Pancake and its payment partners, not stored by us. We do not use face recognition to identify people.
3. Buying without an account
You can make and buy a video without creating an account. When you first use the generator we create an anonymous guest session in a cookie on your browser. Your photos, credits and videos are linked to that session, so you can come back to My videos from the same browser. Clearing cookies or switching browsers ends access to guest videos, so download your video when it is ready. The email you enter at checkout is used for the payment receipt and to help you if something goes wrong with your order; it does not create an account or sign you up for marketing.
4. Accounts
If you choose to create an account, Better Auth on our website server handles email-and-password sign-in. Email sign-up does not send a verification email, so an email address alone does not prove mailbox ownership; privacy requests may need extra checks. Password hashes are stored in our database and never sent to AI providers.
5. Why we process it
To make and deliver the videos you request, process purchases, prevent abuse and fraud, answer support requests, and meet tax and accounting obligations. Where applicable law requires a legal basis, these rely on our contract with you, our legitimate interest in a safe service, and legal obligations. Optional analytics runs only after consent.
6. Providers and AI models
Vercel hosts the website. Neon stores application and authentication records. Cloudflare R2 stores private photos and videos. Your photo is sent through a short-lived private link to SeeAPI (GROWCRAFT PTE. LTD.) for image moderation and to APIMart, which runs portrait review and the ByteDance Seedance 2.5 video model; the finished video is sent the same way to SeeAPI for video moderation. Waffo Pancake screens the scene prompt, which is written by us and contains no personal data. Waffo Pancake is the Merchant of Record for payments. Google Analytics runs only after you accept optional analytics (https://policies.google.com/privacy).
7. Storage and retention
Photos and videos are private: they are never shown in a public gallery and are only accessible from the guest session or account that created them. They are kept so you can download your video again, and deleted when you ask us. Moderation records (check IDs and outcomes, no image content) are kept with the job record. Security logs and support emails are kept for 90 days, and payment and credit records for the period required by tax and accounting law. Deleting our copy does not erase files you downloaded or copies retained by providers under their own terms.
8. Model training and sharing
We do not sell personal information, do not use your photos or videos to train models, and do not publish them or use them in marketing. Example videos on this site use AI-generated people only. External providers process data under their own terms; we do not promise provider-side zero retention.
9. International processing and security
Our providers may process data outside your country. We use HTTPS, private storage, short-lived signed links, ownership checks and server-side credentials. No system is completely secure; where required by law we notify affected people and authorities of qualifying breaches.
10. Your rights
Depending on where you live, you may request access, correction, deletion, restriction or portability of your data, object to processing, or withdraw consent. Email hello@costumeflip.com; for guest purchases include the checkout email and order date. We aim to respond within 30 days. You may also complain to your local data protection authority. The service is for adults 18+.
11. Changes
We announce material changes on this page at least 14 days before they take effect where practicable; urgent legal or security changes may apply sooner.
Questions? hello@costumeflip.com