Privacy Policy

1. What This Policy Covers

This policy explains what information Zombie Video (the "Service", at zombievideo.org) collects, how it is used and shared, and the choices you have. By using the Service you agree to this policy.

2. Your Photos, in Short

• Uploaded face photos are used only to render your videos and to run automated safety checks on them. They are sent to our AI providers for those purposes and nothing else.
• We do not use your photos to train our own models, and we do not sell them.
• Only upload photos of yourself or of people who have given you permission — never of a minor without a parent or guardian's consent.
• You can ask us to delete your photos and videos at any time via a support ticket.

3. Information We Collect

• Account information. Your email address and display name, and — if you sign in with Google — the name, email, and avatar Google shares with us. Passwords for email accounts are stored as salted hashes; we never see them in plain text.
• Content you provide and create. The photos you upload (one per person, or one photo of two people), the video effect and render settings you pick, and the videos rendered for you.
• Credits. Your credit balance and its history, including the credits for the free video every new account receives at signup.
• Payment information. Paid features are not currently offered, so we collect no payment information. If paid features are introduced, payments will be handled by a payment provider (such as Stripe); we would receive transaction records but never store your card number.
• Technical data. Server logs (IP address, timestamps, request metadata), device and browser information, the country your visit comes from, and cookies needed to keep you signed in and remember your language preference. IP address and account signals are also used to enforce the free-video limits.
• How you found us and what you did on the site. When you arrive we record the page you landed on, the referring site, campaign parameters in the link (such as UTM tags or an ad click ID), your IP address, and your browser's user agent, under a random visitor ID kept in a cookie (your browser also keeps the landing details in local storage until they have been reported). We also record steps you take on the site (for example adding photos, starting a render, or downloading) and which version of a page you were shown. Once you sign in, these records are linked to your account.
• Analytics. We use Google Analytics, Plausible and DataFast to understand aggregate usage. Google Analytics sets its own cookies.

4. How We Use Information

• To operate the Service: your photos and the video effect you choose are sent to third-party AI rendering providers through an API aggregator (SeeAPI) solely to render the videos you request.
• To keep the Service safe: your photos and the finished video are checked by automated safety filters (also through SeeAPI) before rendering or before the video is shown.
• To store and serve your photos and videos through cloud object storage (Cloudflare R2).
• To track your credit balance, including granting your free video and returning credits when a render fails.
• To maintain security: preventing abuse (including multiple accounts claiming the free video), enforcing the content rules in our Terms, and debugging failed renders.
• To improve the Service: measuring which channels and pages work, and testing different versions of pages (so different visitors may see different versions).
• To run the business: if paid features are introduced, when an order is paid our team receives an internal notice with the buyer's email address, the product, the amount, the time, the country, and how the buyer found us.
• To remind you, by email, about something you started: a video that finished rendering, or a video you set up but didn't make. At most one reminder every few days; every reminder has a one-click unsubscribe link, and unsubscribing stops all reminders (notices that a video you made is ready still arrive). Emails are sent through Resend.
• To send service communications related to your account.

We do not sell your personal information.

5. How Information Is Shared

Only with parties needed to run the Service:

• AI rendering providers and our API aggregator, which receive the photos and inputs for a video you request;
• Infrastructure providers (Cloudflare for hosting and storage, and our database host);
• Google sign-in and analytics providers (Google Analytics, Plausible, DataFast) as described above, and a payment provider such as Stripe if paid features are introduced;
• WeCom (Tencent), the workplace messaging service our team uses to receive the paid-order notices described above, if paid features are introduced;
• Resend, the email service that delivers our notices and reminders;
• Authorities, where required by law or to protect the Service, its users, or people depicted in content.

Public activity line. Pages with the video maker may show a line of recent site activity, such as "5 min ago · someone in Germany made a zombie video". It shows only how long ago, the country, and the kind of video. It never shows names, emails, photos or videos.

6. Retention and Deletion

• Your photos and videos are kept so you can view and download them, until you ask us to delete them or delete your account. Residual copies leave backups on a normal rotation cycle.
• To delete photos, videos, or your whole account, open a support ticket and we will do so within a reasonable period, except records we must keep by law.
• Free-video and credit records (and any transaction history) are retained for accounting and abuse prevention.
• Visit and on-site activity records are kept for as long as they are useful for measuring and improving the Service, and are deleted together with your account.

7. Security

Data is encrypted in transit (HTTPS). Access to production systems and stored files is restricted. No method of storage or transmission is perfectly secure, so we cannot guarantee absolute security — please use a strong, unique password.

8. Your Choices and Rights

• View and download your videos in your account; edit account details in settings.
• Depending on where you live, you may have rights to access, correct, export, or erase your personal data — exercise them via a support ticket.
• If someone uploaded your photo without permission, contact us and we will remove it.
• You can limit analytics cookies through your browser settings or extensions.

9. Children

The Service is not directed at children under 13 (or the higher minimum age where you live). We do not knowingly collect their data; if you believe a child has provided data or a minor's photo was uploaded without guardian consent, contact us and we will delete it.

10. International Processing

We and our providers may process data in various countries. Where we transfer data internationally, we rely on the safeguards those providers offer.

11. Changes and Contact

We may update this policy; the date above (October 7, 2026) reflects the latest revision, and material changes will be announced in the product. Questions or requests: open a support ticket from your account menu (Settings → Support tickets), or email support@zombievideo.org.