Privacy Policy
Last updated October 2026
What we collect
Your name, email and avatar from your sign-in provider; the prompts, reference photos and outputs you create; the characters and films you save; the reports you send; billing records from our payment processor; and, if you join the affiliate program or turn on notifications, your payout email and your browser's notification address.
How we use it
To run the studio, process payments and send service emails: sign-in links, receipts, render notifications and a few tips while you get started. Offers and product news are only sent if you tick the box for them. Every email has a one-click unsubscribe link.
Public creations
On the Free plan, every creation is public: it appears on Explore and on its own page with its prompt, and with the name and avatar from your sign-in provider. Paid plans can keep creations private and switch each one on or off. Reference photos you upload are never shown.
Photos of people you upload
When you animate or edit a photo, we use it only to make the creation you asked for. It is sent to fal.ai and to the company that made the model you picked, which may process it in the United States or elsewhere under their own terms. Cirrela never uses your photos to train AI models and never runs face recognition on them.
The photo stays private: it is never shown on public pages, even when the creation is public. We keep it with the creation until you delete the creation or your account, which deletes the photo too. fal.ai keeps request records for up to 90 days by default under its own policy.
Only upload photos you have the right to use, with the consent of the people in them.
Filters and reports
Our filter checks each prompt before a render starts. When it refuses one, we keep the category and, except for child-safety refusals, the first words of the prompt for 30 days, to stop abuse and fix our mistakes. Reports you send (the reason, your details and your account) are kept while we handle them, and deleted about a year after they were sent once a decision is made.
The AI-generated label
As the EU AI Act asks, files we store carry metadata saying they were generated by AI with Cirrela. It contains no personal data: no name, email or prompt.
Cookies and storage on your device
We only use what the site needs, so there is no consent banner:
- a sign-in cookie that keeps you signed in;
cirrela_via, set when you follow an affiliate partner's link: it holds the partner's code and the date of the click, for 60 days, so the partner is credited if you sign up. It holds no personal data. A copy is kept in your browser's local storage in case the cookie is dropped;- a few preferences in your browser's local storage, such as light or dark mode.
Our audience measurement writes nothing on your device (see below).
Notifications
If you turn on notifications for this device, your browser gives us an address at its push service (Google, Mozilla, Apple or Microsoft, depending on the browser) and the keys to encrypt messages to it. We use them only to tell you a render is ready. They are deleted when you turn notifications off, when the browser stops accepting them, or with your account.
Audience measurement and error reports
We may use two optional services, each only when we have switched it on:
- PostHog, on its EU cloud, counts page views. It stores nothing on your device, identifies nobody, receives page addresses without their parameters, and respects your browser's Do Not Track setting. We also send it a few product events (such as a sign-up or a finished render) under a one-way code instead of your account, never your email or prompts.
- Sentry receives error reports from the site so we can fix bugs: errors only, with emails, page parameters and what you type removed, and no IP address or cookies.
To object to either, turn on Do Not Track or write to hello@cirrela.com.
Processors
We rely on Convex (database and storage), Cloudflare (hosting), fal.ai and the model makers it connects to (model inference), Anthropic (the “Improve” prompt assistant and film mode's Director), Stripe (payments), Resend (email), your browser's push service (notifications), and, when switched on, PostHog (audience measurement, EU) and Sentry (error reports). Each only receives what it needs to provide its service.
Retention and deletion
Deleting a creation removes its stored files and the photo you uploaded for it. In Settings you can download everything we hold about you, with nothing left out, or delete your account: your creations, photos, characters, films, likes, credit history, reports, notification devices and activity records are then erased. Payment records, and the payouts we made to affiliate partners (without the payout email), are kept for as long as accounting law requires. Copies of the emails we sent you are deleted within 30 days. See also our legal notice.
Your rights
You can access, export or delete your data yourself in Settings. To correct it, object to how we use it or ask anything else, write to hello@cirrela.com. You can also complain to the CNIL, the French data protection authority (cnil.fr).