The short version
- We collect what we need to run your account and make animations: your email, username, prompts and the animations you make.
- No ads, no tracking scripts, no selling your data.
- Your prompts go to the AI companies that make the motion. Your email doesn’t.
- Payments go through Stripe; we never see your card number.
- Email us and we’ll show you or delete your data.
What we collect
- Account: your email, username and password. We store the password only as a salted PBKDF2 hash, never the password itself.
- What you make: your prompts, settings (length, model), and the animation files generated for you, so you can see your history and download them again.
- Marketplace: animations you publish, with their title, description, tags, price, poster image and preview video, plus your purchases and sales.
- Credits: a record of credits added and spent, and, if you pay, Stripe’s customer, payment and subscription IDs. Stripe holds your payment details.
- Security: a login session token (we store only its SHA-256 hash) and, to stop spam sign-ups and password guessing, a keyed hash of your IP address. We never store the IP itself, and those hashes are deleted after about two days.
- Files you open in the viewer are read by your browser and stay on your computer. We don’t upload them.
Who we share it with
Only the companies that help run RoMotion, and only what each needs:
- Cloudflare: hosts the site, database and files. It runs the Turnstile check on sign-up and the AI model (Qwen, on Cloudflare Workers AI) that checks prompts and, with Enhance prompt on, rewords them.
- Uthana and Replicate (which runs NVIDIA Kimodo): receive the prompt text and animation length to make the motion. They don’t get your email, username or IP from us.
- Stripe: processes payments and subscriptions, and receives your email and payment details when you buy.
These companies may process data in the United States and other countries. We don’t sell or rent your data, and we don’t share it for advertising. We’d only disclose it otherwise if the law requires it, or to protect people or the service from fraud or abuse.
Cookies and storage
- One cookie,
rm_session, keeps you logged in for up to 30 days. It’s needed for the site to work. - Cloudflare Turnstile may set its own cookies on the sign-up form to tell people from bots.
- Your browser’s local storage remembers small preferences (like the Enhance prompt switch and whether you’ve seen the viewer controls tips) and the ID of a generation in progress, so a dropped connection can’t charge you twice.
- No analytics or advertising cookies.
How long we keep it
We keep your account, generations and credit history while your account is open. Published Marketplace animations stay up until you remove them. When you ask us to delete your account, we delete your personal data within 30 days, except payment and credit records we must keep for tax and accounting, and copies of animations other people bought from you.
Your choices and rights
You can ask us to show you, correct, export or delete your data, or object to how we use it, by emailing [email protected] from your account’s email address. We’ll answer within 30 days. Depending on where you live (for example the EU, UK or California), you may have more rights under local law, and you can complain to your data protection authority.
Children
RoMotion isn’t for children under 13, and we don’t knowingly collect data from them. If you think a child under 13 has an account, email us and we’ll delete it.
Security
Connections are encrypted (HTTPS), passwords and session tokens are hashed, and provider keys stay on our servers. No system is perfect; if a breach affects your data, we’ll tell you.
Changes
If we change this policy, we’ll update the date at the top, and tell account holders about important changes before they apply.
See also: Terms of Service · Privacy Policy · Refund Policy · Questions: [email protected]