Privacy

Who runs this

Transmutiny is operated by Stuart Bourhill, a sole trader in the United Kingdom. For anything on this page, including asking for a copy of your data or asking for it to be deleted, write to stuburger@gmail.com.

What is stored, and why

If you have not signed in

The first time you make something, you are given a cookie holding a long random value. We store only a one way hash of it, never the value itself, so a copy of our database is not a set of working sessions. We also store the IP address that asked for it, which is used to stop one machine minting endless free allowances.

If you report a picture without having made anything, we store a one way hash of your IP address on that report. It is there so that one person cannot report the same picture over and over, and it is a hash rather than the address because the only thing it is ever compared against is another report. We cannot read an address back out of it.

If you sign in

Signing in uses Google. Google tells us your email address, your name and an identifier for your Google account, and we store those. We never see your Google password.

What you make

The words you type and the pictures that come back are stored, along with a record of which pictures were made from which. Pictures you upload are stored too.

If you buy pictures

Payment is handled entirely by Stripe. We never see or store your card details. We store the identifier of the Stripe customer record that belongs to your account, and a ledger of how many pictures you have bought and used.

What is public, and what is not

Anything you make in the forge is public. It appears in the public library at Everyone’s Thangs and on the home page, and anyone can see it and build on it, whether or not they have an account. That is the deal in exchange for free generation, and there is no opt out.

Pictures you upload are private wherever you upload them, and anything on a canvas is private. Where a private picture was used to make a public one, the public one shows that something was used without showing what it was.

We can take anything off the public library, and will if it should not be there. That hides it; it does not delete it from the library of whoever made it.

Who else sees it

These are the only companies your information reaches:

• Google. The words you type and any pictures you are composing from are sent to Google’s Gemini and Veo models, which is how the pictures get made. There is no way to use this product without that happening.
• Amazon Web Services. Hosting and storage, in the London region.
• Stripe. Payments, and the receipt emailed to you.
• PostHog. Product analytics: which features get used and what a generation cost us.
• Cloudflare. Turnstile, which is the check that tells a person from a script.

Your information is not sold, and it is not shared with anybody else except where the law requires it.

How long it is kept

Until you ask for it to be removed. Generated pictures cost real money to make, so nothing is deleted on a timer. Write to stuburger@gmail.com and your account and everything attached to it will be deleted, other than records we are required to keep, which in practice means what Stripe holds about a payment.

Your rights

Under UK data protection law you can ask for a copy of what we hold, ask for it to be corrected or deleted, ask us to stop using it, and ask for it in a portable form. Ask at stuburger@gmail.com. If you are not happy with the answer you can complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

There is one cookie that matters and it is the one described above: it is how the site knows which pictures are yours before you have an account. It is necessary for the product to work at all. Analytics and the bot check set their own.

Younger users

Transmutiny is meant to be usable by younger people, and we think it is a good way to learn what these tools can do. It is not aimed at children under 13, an account needs a Google sign in with Google’s own age rules behind it, and anything made in the forge is public, so a child should be using it alongside an adult. If you believe a child has given us information they should not have, write to stuburger@gmail.com and it will be removed.

Changes

If this page changes in a way that matters, the date at the top changes with it.