Effective November 11, 2026. Controller: KooHero. Contact: support@h3image.online.
What we collect
- Account: your email address and sign-in provider (Google). We do not receive your Google password.
- Generations: prompts, settings, reference images you upload (sent to MiniMax, not stored by us), and the images returned, which we store so you can see your history.
- Payments: Creem processes payments. We receive the order ID, product, amount and the email used. We never see your card number.
- Technical: IP address and country (from Cloudflare) for rate limiting, abuse prevention and regional rules. Site analytics use a cookie-free script on analysis.zoohero.me.
- Reports: if you send us a content report, appeal or takedown notice, we use your email address and what you send to investigate and reply, and keep it as long as needed for that and any legal obligations. We may share it with authorities where the law requires, for example CSAM reports to NCMEC.
- Cookies: one session cookie to keep you signed in, and a short-lived one during Google sign-in.
Who receives data
- MiniMax: prompts and reference images, to generate images.
- Cloudflare: hosting, storage (R2) and network logs.
- Creem: payment and tax processing.
- Google: sign-in.
We do not sell personal data or use it for advertising.
Retention
Generated images and history are kept while your account exists and are deleted within 30 days after you ask us to delete your account. Payment records are kept as tax law requires. Ask us to delete your account at support@h3image.online.
Your rights
Depending on where you live you can ask to access, correct, export or delete your data, or object to processing. Write to support@h3image.online.
International transfers
MiniMax, Cloudflare, Creem and Google may process data outside your country. Where the law requires it, these transfers rely on the providers' standard contractual clauses or equivalent safeguards.