PRIVACY POLICY

What we collect

• Account details: your handle, email address and a scrypt hash of your password (never the password itself).
• If you log in with Google or Facebook: your provider account ID, display name and email.
• What you create: prompts, captions, images, likes, votes and reports.
• Technical data: IP address (used for abuse prevention and rate limits), a session cookie, basic server logs, and for each login the type of device (for example Android app, iPhone browser or desktop), its operating system and, where your browser shares it, the phone model. We use these for security and support, such as showing where your account is logged in.
• Anonymous usage statistics through privacy-friendly analytics that do not use advertising cookies.

How we use it

To run Gutter, keep accounts secure, enforce limits and content rules, send emails you asked for (password resets and, unless you turn them off, notices that someone continued your panel), and understand how the product is used. We don't sell your data or use it for advertising.

Service providers

Your prompts and story context are sent to AI providers to generate and moderate panels (Anthropic for text and moderation, fal.ai for images). Images are stored with Cloudflare. Emails are sent through Resend. These providers process data only to provide their service to us.

Children

When you sign up we ask the year you were born, but we only keep whether you are under 18 — not the year. For under-18s we also keep a parent or guardian's email and when they approved. Children's real names are never shown publicly (only their @handle), we don't show ads, and we don't track children across other sites. A parent or guardian can withdraw consent or ask us to delete a child's account at [email protected].

What others can see

Public stories, and your handle on panels you post in them, are visible to everyone and may appear in search engines. Unlisted stories are visible to anyone with the link; private stories only to their members.

How long we keep it

Account data is kept while your account exists. When you delete your account (My Profile → Delete account), your email, password, social logins and display name are erased straight away; your @handle and panels stay in their stories (see the Terms). Server logs and usage records are kept for up to 12 months.

Your rights

You can access, correct or delete your personal data, withdraw consent for optional emails, and nominate someone to act for you, as provided by India's Digital Personal Data Protection Act, 2023 and other applicable laws. Email [email protected].

Cookies

We use one essential cookie to keep you logged in. We don't use advertising or tracking cookies.