Privacy policy
Last updated 21 October 2026This policy explains what personal data Still Life collects, why, and what you can do about it. The data controller is Léo Dubois ([contact email]).
What we collect
Account: your name, email address and password (the password is handled by our authentication provider and never visible to us).
Usage: your credit history, the collections you unlock, and the images you generate, kept in your library.
Product photos you upload: sent to the image models to create your images. We don’t keep them, except when you attach them to a report or a help request.
Requests you send us: failed-image reports, help requests and campaign briefs, with the details you write in them.
Technical data: your IP address, used briefly to prevent abuse (rate limits).
Why
To provide the service you ask for (your account, generating and storing your images): this is necessary for our contract with you.
To prevent abuse and keep costs under control: our legitimate interest.
To answer your requests and briefs: your request.
We don’t sell your data, don’t use it for advertising, and don’t use your images to train AI models.
Who processes it
Supabase (accounts, credits and image library; servers in the European Union, Paris).
Vercel (website hosting, United States).
Sanity (site content, reports, help requests and briefs).
Google (Gemini image models) and fal.ai (Seedream image models), which receive your product photos and the scene to create your images.
Some of these providers are outside the European Union. Transfers rely on the European Commission’s standard contractual clauses or equivalent safeguards.
How long
Account data and your library: as long as your account exists. You can delete your account at any time from your Account page: your account, credits and images are deleted immediately (backups are cleared within 30 days).
Reports, help requests and briefs: up to 3 years after our last exchange.
Abuse-prevention data (IP addresses): a few days at most.
Cookies
We only use cookies needed for the site to work: keeping you signed in, remembering your language, and beta access codes. No analytics or advertising cookies, so no consent banner is needed.
Your rights
You can access, correct, delete or export your data, object to its use, or ask us to limit it. Write to [contact email]; we reply within one month.
If you think your rights aren’t respected, you can complain to the CNIL (cnil.fr).