// PRIVACY
Privacy
How Drawnpage handles your sign-in email, story projects, and generated pictures. Effective 1 November 2026.
Scope
This policy covers accounts, story projects, picture generation, and video export on Drawnpage. It describes the product as it works now. A third-party service also follows its own policy.
The public site is huiye.org. This policy is effective on 1 November 2026.
What is processed, and why
Drawnpage processes the following information.
- Account: your email, optional nickname and avatar, hashed sign-in codes and password, send records, and sessions for sign-in and profile management.
- Project material: the story text you submit, the page script, generated pictures, the exported video, and any background music you upload, so the project can be made and kept.
- Usage: how many pictures are generated, so the daily allowance can be applied.
- Safety records: the email and a hash of the IP address used when a sign-in code is requested, to limit how often codes are sent and to investigate faults. These records are kept only as long as that purpose requires.
Which other services take part
One action does not use every service below. What a provider keeps is covered by that provider’s own policy.
- Resend sends the sign-in code and processes the recipient address and the message.
- DeepSeek turns the story text into a page script.
- Replicate generates the pictures from the script and reference images.
- Cloudflare R2 stores pictures, avatars, music, and exported video when object storage is configured. The site may also be served through Cloudflare.
Cookies
After you sign in, a cookie named story_session keeps you signed in for about seven days. It is HttpOnly. Public pages do not use advertising or analytics scripts.
Clearing the cookie signs you out. It does not delete the account or projects stored on the server.
What you can do now
You can sign out.
The site does not yet let you delete the account yourself or export all data in one step. For an export, account deletion, or another privacy request, use the email address on this page.
After something is deleted, the matching records are removed from the product. Backups, logs, and copies held by providers may remain until their own retention periods end.
Storage and security
Account and project records are stored in the server database. Pictures, avatars, music, and exported video are stored on the server or in configured object storage.
Sign-in codes and passwords are stored as hashes. Access is limited with the session cookie and project ownership checks. The administrator can view account and project list metadata across users for service management. These measures do not remove every security risk.
Minors should use Drawnpage with a guardian’s consent and guidance. A guardian can write to the email address on this page.
Updates and contact
This policy is effective on 1 November 2026. If it changes in substance, this page and the effective date will be updated.
Privacy questions and data requests go to the email address below.