Privacy Policy

Last updated: August 20, 2026

This explains what data TatPrep (tatprep.com) collects and why, written in plain language. If anything here is unclear, email us at support@tatprep.com.

The short version

• Your account info (email, name) comes from Google/GitHub sign-in or your own email/password.
• Designs you generate, and any images you deliberately upload (reference images, custom stencil uploads), are stored in our cloud storage so you can access your history.
• If you upload a photo of your own body to preview where a tattoo would sit, that photo is processed entirely inside your browser and is never uploaded to our servers. This is the one privacy detail we want to be extremely clear about, because it's central to how the placement preview tool works — see the dedicated section below.
• We use privacy-respecting analytics (Umami) to understand traffic; Microsoft Clarity may be added later for session recordings, disclosed here if/when it's turned on.
• Payment is handled entirely by our payment processor (Creem) — we never see or store your card number.

Information we collect

Account information. When you sign up, we store your email address and (if you use Google/GitHub sign-in) your name and avatar as provided by that provider. If you sign up with email/password, we store your email and a securely hashed password — never the password itself in plain text.

Content you create.

• AI-generated tattoo designs (and their thumbnails/HD versions) are stored in our cloud storage (Cloudflare R2) and linked to your account so they appear in "My Designs."
• Prep Pack exports (the PDF, and the data you entered — body part, size, notes, key design elements) are stored the same way, along with a shareable link if you export one.
• Reference images you deliberately upload (for example, attaching a photo to a Prep Pack brief, or uploading an existing tattoo photo to the stencil converter) are uploaded to and stored in our cloud storage.

Usage data. We use privacy-respecting analytics (Umami, self-hosted, no cross-site tracking cookies) to see aggregate things like which pages get visited and which tools get used, so we know what to improve. We may in the future enable Microsoft Clarity for session-replay style analytics — if and when we do, this page will be updated to say so before it's turned on for real users.

Payment data. Purchases and subscriptions are processed by our payment provider (Creem). We receive confirmation that a payment succeeded and which product it was for, but we never receive or store your full card number — that stays with Creem and their payment processors.

Your body photos: processed locally, never uploaded

This is the part of TatPrep's design we're proudest of, so we want to spell it out precisely rather than bury it in generic privacy-policy language.

The Placement Preview tool lets you drag, scale, and rotate a tattoo design on top of a photo — either one of our own neutral sample body-part photos, or a photo of your own body that you upload.

When you use a photo of your own body:

• That photo is loaded directly into your browser (using the browser's own URL.createObjectURL API) and rendered on an in-browser canvas.
• It is never sent over the network to our servers, and we never store a copy of it. Not a thumbnail, not a cached version, not a temporary file — nothing.
• When you save your placement setup, we save the numbers (which body part, the width in cm, rotation, scale) so you can come back to your Prep Pack later — but we do not save an image of your photo, and we do not save a composite preview image when it's built from your own photo.
• If you download the composite preview, that export happens entirely in your browser too (the browser's own canvas export feature) — the finished image goes straight to your device, not through our servers.

When you use one of our own sample photos instead (a neutral, AI-generated photo of a body part with no identifying features), the situation is different: because that photo is already public and not personal to you, we do save the composite preview image you create, so you can revisit it and use it in your Prep Pack.

If you ever want to double-check this for yourself: open your browser's developer tools, go to the Network tab, and upload your own photo in the Placement Preview tool. You'll see no request carrying that photo's data leaves your browser.

How we use your information

• To operate the core product: generate designs, save your history, produce Prep Packs, process payments.
• To provide customer support when you email us.
• To understand aggregate usage (which tools people actually use) so we can prioritize what to build next.
• To detect and prevent abuse — for example, rate-limiting generation requests per account.

We do not sell your personal information, and we do not use your generated designs or account data to train AI models ourselves.

Third-party services we use

• AI image generation providers (used to generate designs and stencils) — your text prompt and generation parameters are sent to these providers to produce the image; your uploaded body photos are never sent to them.
• Cloudflare R2 — cloud storage for generated designs, Prep Pack PDFs, and images you deliberately upload.
• Creem — payment processing.
• Neon — our database provider, hosting account and design records.
• Google / GitHub — for social sign-in, if you choose to use it.
• Umami (and, in the future, possibly Microsoft Clarity) — analytics.

Data retention and deletion

We keep your account data and generated content for as long as your account is active. If you'd like your account and associated data deleted, email support@tatprep.com and we'll process the request — this includes deleting your stored designs, Prep Pack exports, and uploaded reference images from our storage, in addition to your account record.

Children's privacy

TatPrep is not directed at children, and getting a tattoo generally requires being a legal adult in most jurisdictions anyway. We don't knowingly collect data from children under 16.

Changes to this policy

If we make a material change to what we collect or how we use it, we'll update the "Last updated" date above. Continued use after a change means you accept the update.

Contact

Questions about this Privacy Policy, or a data deletion request: support@tatprep.com.