Fill in before launch: replace every [PLACEHOLDER] on this page — [COMPANY NAME], [CVR], [ADDRESS], [SUPPORT EMAIL] and [DATE] — and delete this note.
Privacy policy
Carosel is a tool that suggests the best order for the photos in an Instagram carousel. This page explains, in plain language, what we do with your photos and your data — and what we never do. It is written to match how the app actually works.
Who is responsible
[COMPANY NAME], CVR [CVR], [ADDRESS], Denmark ("we", "us") is the data controller for the processing described here. Questions and requests: [SUPPORT EMAIL].
The short version
- Your original photos never leave your device. The app makes small copies (about 560 px wide) in your browser and sends only those to our AI provider, once, for the analysis. We do not store them — not in a database, not in a file, not in a log.
- We keep almost nothing about you: your name and e-mail from Google or Apple, your credit balance, and a short record of each analysis (which slide went where, the roles and the reasoning text — never the images).
- We never see your card number. Payments go through Stripe.
- No advertising or tracking cookies. Two functional cookies only (see "Cookies" below).
What we process, and why
1. Your photos
When you run an analysis, the app downscales each photo in your browser to roughly 560 px on the longest side and sends those copies — together with the topic and goal you typed — to Anthropic (USA), the company whose Claude model performs the analysis. The copies are sent once, used to produce the result, and are not stored by us. Anthropic processes them under a data processing agreement and, per its API terms, does not use API inputs to train its models. The full-resolution originals stay on your device the whole time; the "save in order" step happens locally in your browser.
During sign-in only: if you upload photos before you are signed in, the app temporarily keeps them in your browser's local storage (IndexedDB) so they survive the trip to Google or Apple and back. That copy lives on your device — not on our servers — and is deleted when you return to the tool, or automatically after at most one hour.
2. Your account
When you sign in with Google or Apple we receive your name, your e-mail address and a stable account identifier from the provider. We use them to recognise you, to attach your credits to you, and to contact you about your account or a purchase if we have to. We do not send newsletters. The session is kept in an encrypted, HTTP-only cookie; we do not keep a copy of your password (we never see it).
3. The free first analysis (device cookie)
You can run your first analysis without an account. To make that work, we set a cookie named carosel_device containing a random identifier and record in our database that this device has used its free analysis in the last 30 days. It contains no personal details and is not used for tracking or advertising. Your IP address is also counted, briefly, by our abuse limiter (see 7).
4. Credits and analysis metadata
Your credit balance, the credits you have bought and used (with timestamps and Stripe's payment reference) and a short record of each analysis — the resulting order, slide roles, the reasoning text, model name, token counts and duration — are stored in our database (Upstash Redis, EU region). We use this to run the service, to refund a credit automatically when an analysis fails, to handle support and refund requests, and to improve the analysis over time. We never store the images themselves in this record.
5. Payments
Credit packs are paid through Stripe. Stripe collects your card details and, where required, your billing country and VAT information, and issues the receipt or invoice. We receive only a confirmation of the payment, the amount, the pack you bought, your e-mail and Stripe's reference IDs. We never receive or store card numbers.
6. Usage analytics
We use Vercel Web Analytics to count page views and a handful of product events (for example "analysis completed" or "export used"). It is cookie-less and does not build a profile of you; we see aggregated numbers, not individuals.
7. Server and error logs
Our hosting provider (Vercel) keeps short-lived server logs: request time, path, response status, IP address, browser type and — when something breaks in your browser — the error message and the page it happened on. Each analysis also writes one structured log line (account ID, photo count, token usage, duration, whether the result had to be repaired). We use these to keep the service working, to stop abuse (our per-account and per-IP limits) and to fix bugs.
Legal bases (GDPR art. 6)
- Performance of a contract (art. 6(1)(b)): running the analysis you asked for, your account, your credits, payments and refunds.
- Legal obligation (art. 6(1)(c)): keeping bookkeeping records of purchases for five years under the Danish Bookkeeping Act, and VAT records.
- Legitimate interest (art. 6(1)(f)): security and abuse prevention (rate limits, the device cookie), error logging, and anonymous analytics to understand how the product is used. You can object at any time — see "Your rights".
Photos of people can reveal sensitive things (art. 9). We only ever process the photos you choose to upload, only to give you the result you asked for, and we do not use them for anything else — including facial recognition or model training.
How long we keep things
| Data | Kept for |
|---|---|
| Downscaled photo copies sent for analysis | Not stored by us. Processed in memory and discarded when the response is sent. |
| Photos held in your browser during sign-in | On your device only; deleted on return to the tool or after 1 hour. |
| Account (name, e-mail), credit balance, analysis metadata | Until you delete your account (see below). |
| Purchase records | Five years after the end of the financial year (bookkeeping law), even after account deletion. |
| Device cookie for the free analysis | 30 days. |
| Session cookie | Up to 7 days, or until you sign out. |
| Server and error logs | Typically 1–30 days on our hosting provider. |
Who we share data with (sub-processors)
We do not sell data and we do not share it with advertisers. The companies below process data on our behalf, under contracts that require them to protect it:
| Provider | Location | What they do for us | Safeguard |
|---|---|---|---|
| Anthropic, PBC | USA | Runs the AI analysis on downscaled copies of your photos and the topic you typed. | Data Processing Addendum · EU–US Data Privacy Framework / Standard Contractual Clauses |
| Stripe, Inc. (Stripe Payments Europe Ltd. for EU customers) | Ireland / USA | Processes card payments and issues receipts. Stripe is an independent controller for card data. | Stripe DPA · Data Privacy Framework / Standard Contractual Clauses |
| Vercel, Inc. | USA (edge network worldwide) | Hosts the app, runs our server functions, stores error logs and anonymous usage analytics. | Vercel DPA · Data Privacy Framework / Standard Contractual Clauses |
| Upstash, Inc. | USA (database region: EU) | Stores your credit balance, purchase history and analysis metadata (never images). | Upstash DPA · Standard Contractual Clauses |
| Google LLC / Apple Inc. | USA / Ireland | Sign-in providers. They tell us your name and e-mail when you choose to sign in with them. | Their own privacy policies apply to your Google/Apple account. |
We will also disclose data if the law requires it (for example a court order) or to defend our rights in a dispute about a payment.
Transfers outside the EU/EEA
Anthropic, Stripe, Vercel and Upstash are US companies. Transfers to them rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses (GDPR art. 46) with additional safeguards. Your downscaled photos are sent to Anthropic in the USA for the analysis; that is the only transfer of your images, and it happens only when you press the analyse button.
Your rights
Under the GDPR you can:
- See what we hold about you — in the app, the account view shows your e-mail, balance and history; or write to us for a full export.
- Delete your account and data — use the Delete account button in the app (it removes your account, credits and analysis history immediately and permanently; unused credits are forfeited unless you ask for a refund first, see the Terms), or e-mail us. Purchase records we are legally required to keep are retained but no longer linked to a usable account.
- Correct inaccurate data (your name and e-mail come from Google/Apple — change them there).
- Object to processing based on legitimate interest, and restrict processing while a request is handled.
- Take your data with you in a machine-readable format.
- Complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk) or your local supervisory authority.
Write to [SUPPORT EMAIL]. We answer within one month.
Cookies
We use two cookies, both strictly necessary for the service and therefore set without a consent banner:
| Cookie | Purpose | Lifetime |
|---|---|---|
authjs.session-token (prefixed __Secure- on HTTPS) | Keeps you signed in. Encrypted, HTTP-only. | 7 days or until sign-out |
carosel_device | Remembers that this device has used its free analysis. | 30 days |
There are no advertising, social-media or cross-site tracking cookies. Stripe sets its own cookies on Stripe's checkout page, governed by Stripe's policy.
Children
Carosel is not intended for children under 13 (or the age of digital consent in your country, 13 in Denmark). We do not knowingly collect data from children.
Security
All traffic is encrypted (HTTPS). Photos are handled in memory and never written to disk on our side. Sessions are encrypted cookies. Access to our provider dashboards is limited to the two people who run Carosel and protected with two-factor authentication.
Changes to this policy
If we change how we process data in a way that matters to you, we will update this page and change the date at the top; for significant changes we will also tell signed-in users in the app.
Contact
[COMPANY NAME] · CVR [CVR] · [ADDRESS] · [SUPPORT EMAIL]
See also our Terms of service.