Your files and privacy

Updated November 14, 2026. This policy describes how Christmas Dance handles your information.

What this release stores

When you save a dance and upload photos, we store the files privately in Cloudflare R2. Cloudflare D1 stores its identifier, file type, size, upload time and the anonymous browser identifier that owns it. A secure cookie lets the same browser access its own uploads and video jobs.

Accounts

When you sign in, Christmas Dance stores your email, display name, verified login provider and sessions in Cloudflare D1. Email codes expire after five minutes and are stored as hashes. Google sign-in requests basic identity information. We never receive your Google password. New signed-in uploads belong to your account. Earlier browser drafts move into account access only when you choose to save them. Signing out removes account access from the browser. Sign-in methods appear only after their service configuration is available.

Processing

Reference previews use existing media and do not send your photos to a model. For personalized video requests, the selected video, reference photos and editing instructions are sent to the configured video provider, SeeAPI, KIE or Replicate, through expiring file links to create your requested video. The tool describes the action before you submit it. We do not publicly list your uploaded files or use them as homepage examples.

Storage and browser access

Uploaded files are retained until removed during project maintenance. There is currently no automatic deletion deadline or self-service deletion screen. Clearing the browser cookie removes your access, but does not itself delete stored files.

Traffic measurement and privacy choices

We use Plausible for cookie-free traffic counts. Google Analytics loads in Advanced Consent Mode: before you allow analytics cookies, it can send limited signals without analytics cookie storage. Microsoft Clarity receives your consent choice and operates without its analytics cookies until you allow them. Uploaded photos and private video areas are masked in recordings.

Our own activity records include page paths, selected dance templates, photo-slot actions and generation/download stages. They exclude uploaded photo contents, filenames, private file links and editing instructions. Before analytics consent, these records do not have a persistent journey identifier. If you allow analytics cookies, a separate secure cookie links activity across pages. You can reject or withdraw analytics consent using Privacy choices; your essential file-access cookie is separate.

Activity records are stored in Cloudflare D1 until removed during maintenance. We do not currently offer a separate analytics-data deletion screen. GA4, Clarity and our own records have different collection and reporting behavior; a cookie-free signal does not guarantee an individual visit appears in a provider's reports.

Infrastructure

The website, application data and uploads are hosted on Cloudflare. Service logs may include request metadata and technical errors. We do not use advertising trackers or marketing cookies.

For questions about your account or files, email support@christmasdancely.com.