Strictly Necessary

These are required for the Service to operate securely. They cannot be disabled.

• Authentication and session management (keeping you logged in)
• Security, CSRF protection, and anti-abuse measures
• Payment/checkout session continuity (Stripe)
• Cookie preference storage (recording your consent choices)
• Language preference (remembering the interface language you choose, English or Turkish)
• Bot detection and fraud prevention (Cloudflare Turnstile)

Analytics & Performance

Help us understand how the Service is used and how well it performs. Require your consent.

With analytics consent, Google Analytics measures visits across our website and studio, completed registrations, first saved generations and verified checkout purchases. For the first page of a visit it also records which website and which campaign link brought you here: only that website's domain and the campaign label, never the full address you came from. We do not send your email, prompts, uploaded images or generated images to Google Analytics. When you complete a purchase, our server also reports that purchase to Google Analytics, so it is counted even if you close the page before it finishes loading. It sends only your analytics identifier, the amount, the currency and a one-way hashed order reference, never your name, email address or card details. Rejecting optional cookies keeps these measurements off.

Cookieless usage statistics: separately, our host Vercel counts page views to show us how our website is used so we can improve it. It sets no cookies and stores nothing on your device, and it receives only the page address without any parameters, the referring website, country, browser and device type. It cannot recognise you across days. We rely on the UK exception for statistics that improve a website, so it runs unless you object: switching off Analytics & Performance in Cookie settings, or a Global Privacy Control signal from your browser, turns it off.

• Feature usage and navigation patterns
• Page visits and aggregate performance metrics
• Error tracking and crash diagnostics

Marketing & Advertising

Help us measure whether our own ads work. They require your consent and are off until you accept them.

If you arrive by clicking one of our ads, the link carries a click identifier added by the ad platform (for Google, for example, gclid). With marketing consent we keep that identifier in a first-party cookie for up to 90 days and, if you later sign up or buy, we let the ad platform know that its click led to that result: the click identifier, the type of action (sign-up or purchase), and for purchases the amount, currency and a one-way hashed order reference. We never send your name, email address, prompts, uploaded or generated images, or payment details.

We use this only to measure our own campaigns. Ad personalisation is switched off: we do not use these cookies for retargeting or to build advertising profiles about you, and we do not let ad platforms use this data to personalise ads to you. If your browser sends a Global Privacy Control signal, we treat it as a refusal of marketing cookies.

• Conversion measurement for our own ad campaigns
• Counting sign-ups and purchases that follow an ad click

If you withdraw marketing consent, we delete our click-identifier cookie and stop sending these signals.

Our cookie banner: When you first visit, a banner gives you the choice to Accept All, Reject Optional, or Manage Preferences. You can reopen your preferences at any time using the “Cookie Settings” button at the bottom of the page.

Browser controls: Most browsers let you block, delete, or alert you to cookies via privacy or site settings. Blocking essential cookies may prevent login, checkout, and core features from working correctly.

Effect of rejection: If you reject analytics and marketing cookies, new optional scripts will not load. Any previously set optional cookies may persist until browser expiry or manual deletion via browser controls. Core service features remain available.