Privacy Policy
Last updated October 21, 2026 · Contact support@tiptoeinjordans.com
About this policy
This policy explains what Tip Toeing in My Jordans (tiptoeinjordans.com) collects, how we use it, who we share it with and what you can do about it. Operator details are in our Commercial Disclosure.
What we collect
Account details (your email, plus the name and profile picture Google provides if you sign in with Google); the photos you upload; your videos, any previews and a record of each request; order details, but never your card number; technical data such as your IP address and browser; and any messages you send us.
How your photos are handled
Your photos sit in private storage and are sent to a third-party AI video generation provider in the United States to make your videos and any previews. We use them only for that.
How long photos and videos stay
Photos are deleted automatically 60 days after upload, and videos and any previews 60 days after they are made. You can delete them earlier at any time from My videos.
No AI training
We never train AI models on your photos or videos.
How we use information
We use this information to sign you in, to make and keep your videos, and to track your credits; to handle payments, refunds and your monthly plan; to send service emails such as sign-in links and video-ready notices; to prevent abuse and enforce our Terms; to improve the site; and to answer your questions. Photos of everyone shown in an upload, not just the uploader, are used only for these purposes.
Who we share it with
We share information only with the providers we need to run Tip Toeing in My Jordans, and only for their part of the job: an AI video generation provider (photos and generation requests), Google (if you sign in with Google), Stripe and Link (payments), an email delivery provider (email), Plausible and Microsoft Clarity (analytics), a cloud hosting provider (hosting), an object storage provider (photos and videos) and a content delivery and security provider (site traffic). We may also disclose information when the law requires it or to protect our users, the public or the service.
We don’t sell your data
We don’t sell your personal information.
International processing
Our providers may process data outside your country. Details are in the “Providers outside Japan” sections below.
Providers outside Japan
When you tick “I agree to the Terms and Privacy Policy” in the generator, you consent to us providing your photos, generation requests, email address and related information to the five US providers listed below (Article 28(1) of Japan’s Act on the Protection of Personal Information). For an overview of each country’s privacy laws, see the foreign-system survey by Japan’s Personal Information Protection Commission. Our email delivery, cloud hosting, object storage, and content delivery and security providers have data processing agreements with us: they process data only on our instructions, keep security measures in place and use it for nothing else, and we check how they comply once a year. We have no data processing agreement with our AI video generation provider; the section on that provider below explains how it handles data.
Providers outside Japan: AI video generation provider
A third-party AI video generation provider in the United States makes your videos and any previews from your photos and passes generation requests to the providers of the video models. The US has no comprehensive federal privacy law; privacy is covered by sector-specific federal laws and by state laws. We have no data processing agreement with this provider. Under its terms, it may use uploaded content only to operate and improve its services, and the terms don’t say whether that includes training models. It deletes the files it generates after 14 days, files received through its upload interface after 24 hours, and its logs after 2 months.
Providers outside Japan: email delivery provider
An email delivery provider in the United States sends sign-in links and video-ready emails, which means handling your email address. See the AI video generation provider section for US law. Under this provider’s data processing addendum, it processes data only on our instructions, keeps it confidential and secure, binds its subprocessors to the same obligations, deletes data when the service ends and tells us promptly about security incidents.
Providers outside Japan: cloud hosting provider
A cloud hosting provider in the United States hosts our servers and data. See the AI video generation provider section for US law. It acts as our processor under its data processing agreement, and its staff access data only when needed for security, maintenance or support.
Providers outside Japan: object storage provider
An object storage provider in the United States stores your photos, videos and any previews for us. See the AI video generation provider section for US law. The object storage provider, under its data processing addendum, processes the data only on our instructions and for no other purpose, requires its subprocessors to agree in writing to equivalent obligations, applies security measures including access controls, and notifies us of security incidents.
Providers outside Japan: content delivery and security provider
A content delivery and security provider in the United States sits in front of our website: all traffic to the site passes through it for content delivery and protection against DDoS attacks, and it tells us which country you are visiting from based on your IP address. This means handling your requests to the site, including your IP address and request headers. See the AI video generation provider section for US law. Under this provider’s data processing addendum, it processes data only on our instructions, keeps it confidential and secure, binds its subprocessors in writing to equally protective terms, deletes or returns data when the service ends and tells us without undue delay about security incidents.
Other people in your photos
An uploaded photo may show people other than the uploader. We use everyone’s photo only for the purposes under “How we use information” and delete it on the schedule above. Anyone shown in a photo can ask us to delete it or stop using it through the report form or by emailing support@tiptoeinjordans.com.
Cookies: essential
A session cookie keeps you signed in. It ends when you sign out, or after 30 days without use. Your language comes from the page address, so we don’t store it in a cookie.
Cookies: analytics
Plausible counts page visits without cookies. Microsoft Clarity records clicks, scrolling and similar actions as heatmaps and session replays, which shows us where the site is hard to use. A session replay rebuilds what happened on the page; it isn’t a video recording of your screen. Clarity sets first-party cookies (_clck and _clsk) and Microsoft third-party cookies (CLID, MUID, ANONCHK, MR and SM). For visitors from the EEA, the UK or Switzerland, Clarity sets no cookies and collects only cookie-free data. We mask your photos, previews, generated videos and email address, so they are never sent to Clarity.
Cookies: third parties and your choices
Google sign-in and Stripe checkout may set their own cookies, which their own privacy policies cover. You can block or clear cookies in your browser settings. Blocking Clarity’s cookies changes nothing else on the site, but without essential cookies you won’t stay signed in.
Local storage
We don’t keep your photos in your browser’s local storage.
Information sent to outside services
The next four sections list what your browser sends to outside services when you use Tip Toeing in My Jordans, who receives it and why.
Sent to Plausible
What: page URL, referring URL, browser, operating system and device type, and the country, region and city inferred from your IP address. Plausible sets no cookies, doesn’t store your IP address and doesn’t identify you; we don’t send it your email address, photos or payment details. To: Plausible Insights OÜ (Estonia), which keeps the data in the EU. Why: to count visits. See the Plausible data policy.
Sent to Microsoft Clarity
What: page URL, clicks, scrolling and similar actions, browser and device details, the approximate location inferred from your IP address, and Clarity’s cookie ID. Masked photos, previews, generated videos and email addresses are not sent. To: Microsoft Corporation (United States). Why: to find and fix parts of the site that are hard to use. Microsoft also uses this information under its own privacy statement, including to improve its products and to build profiles for Microsoft Advertising.
Sent to Google sign-in
What: the sign-in request and browser details, only when you choose to sign in with Google. To: Google LLC (United States). Why: to sign you in.
Sent to Stripe
What: the payment details you enter at checkout, plus browser and device details. To: Stripe, Inc. (United States) and its affiliates. Why: to complete your payment and prevent fraud.
How long records stay
Account details are kept until you delete your account, and deleting it also removes its videos and any remaining credits. Payment records are kept for the period tax and accounting rules require, even after the account is gone.
Your rights
You can ask to access, correct, delete or export your personal information, to stop or restrict certain uses, or to withdraw your consent. Email support@tiptoeinjordans.com from your account address; you may also lodge a complaint with the data protection regulator where you live.
Children
Tip Toeing in My Jordans is only for people aged 18 and over. A child’s photo may be uploaded only with a parent or guardian’s consent, and if we find an account belongs to someone under 18, we delete its data.
Security
We protect data with encrypted connections, private storage and restricted access. No way of sending or storing data is completely secure.
Legal bases for users in Europe
For users in the EEA and the UK, we rely on three legal bases: performing our contract with you (sign-in, generation, payment), our legitimate interests (security, abuse prevention, improving the site), and your consent where consent is required.
Changes to this policy
We may update this policy, and each new version will appear on this page with a new date.
Notice under Article 32 of Japan’s APPI
Business operator, address and representative: see our Commercial Disclosure.
Purposes of use: all purposes listed under “How we use information” above.
Requests for disclosure, correction, deletion, suspension of use or disclosure of third-party transfer records: email support@tiptoeinjordans.com from your account address; we verify you through that address before replying, and there is no fee.
Complaints: support@tiptoeinjordans.com.
Security measures: a written basic policy on handling personal data; a named person in charge and access limited to the people who need it; confidentiality and security training for anyone handling data; encrypted connections, access controls and private storage; and, for data handled abroad, our AI video generation, email delivery, cloud hosting, object storage, and content delivery and security providers in the United States (see the “Providers outside Japan” sections above), with our servers and the photos and videos we store also in the United States; we have reviewed the privacy laws of the United States and taken them into account.Contact
Email support@tiptoeinjordans.com. Operator details are in our Commercial Disclosure.
IP location data
To decide whether to show notices required for buyers in Japan, we use the country that Cloudflare, the network that delivers our site, works out from your IP address and passes to our server with each request. We use it only for this and don’t store it.