Privacy Policy
GraffForge privacy policy: what browser tools keep on your device, what account and AI generation data is stored, which processors get it, how to delete it.
What this policy covers
This policy describes the GraffForge MVP. It does not claim zero retention. Production retention periods will be published after the APIMart, Cloudflare, and Waffo production settings have been verified.
Free browser tools
The Font, Tag, and Online graffiti tools run in your browser. The text, colors, and effect settings used in those tools are not sent to our server for the purpose of creating the PNG.
Account data
When you register, Better Auth stores your name, email address, password-derived authentication data, sessions, and verification state in Cloudflare D1. We use that data to protect your generation balance and private History.
AI generation data
When you use the AI Generator, GraffForge stores job data in D1, including the submitted prompt and optional negative prompt, selected mode, preset, ratio, status, and provider task ID. Private reference objects and completed results are stored in Cloudflare R2 so jobs can be reconciled and reopened in History.
When the production image provider is enabled, the prompt, selected options,
and any supported reference-image URLs are sent to APIMart (api.apimart.ai)
for processing.
Temporary provider result URLs are copied to R2 after a successful job. We do
not place API keys, complete private prompts, or private object URLs in browser
code or routine logs.
Before generation, user-supplied text is sent to Waffo Prompt Sift for a stateless safety verdict; Waffo states that this check does not retain prompt text after returning. Before a generated image is stored or displayed, its bytes are sent to Cloudflare Workers AI for a safety classification. GraffForge stores a redacted moderation record containing the stage, action, reason code, matched category identifiers, and request ID. The moderation record does not contain a second copy of the prompt or image.
Payments
Waffo hosts checkout and its consumer portal. GraffForge receives signed Waffo webhook events needed to grant, renew, cancel, or revoke plan access. Payment credentials and card details are not collected by GraffForge.
Deletion
Deleting a History item removes its saved R2 result and the History record. Generation ledger entries may be retained without the deleted job link for balance integrity and fraud prevention. Account deletion follows the controls available in account settings and applicable retention obligations.
Security and service providers
GraffForge uses Cloudflare Workers, D1, R2, and KV; Better Auth; APIMart when AI production mode is enabled; Waffo for billing and prompt safety; and Cloudflare Workers AI for generated-image safety. We use access-controlled routes for private results and reasonable technical measures to protect stored data, but no service can guarantee absolute security.
Analytics, cookies, and consent
GraffForge measures page views and feature usage with first-party events so we can improve the product. We do not sell this data and we do not use it for advertising.
When a Google Analytics measurement ID is configured, production pages load
Google Analytics 4 (gtag.js). That tag sends a page view on each route and
product events such as sign-up, login, editor use, PNG export, AI generation,
pricing views, checkout, and purchase. Those events do not include your name,
email address, prompt text, or payment card details. Google may set its own
cookies and receive technical data such as IP address and browser information
under Google's privacy policy. The tag
does not load in local development, and it does not load when no measurement
ID is set.
Session-recording analytics (Microsoft Clarity) are optional. The recording
script only loads after you press "Accept" in the cookie banner, and we mask
the text in the login and registration forms. If you press "Decline", session
recording stays off. You can change your choice at any time: clear the
gf_cookie_consent entry in your browser storage for this site and the banner
appears again.
Children
GraffForge is not directed to children. The Terms of Service require every user to be at least 18 years old, and the register form asks for that confirmation. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact support@graffforge.com and we will delete it.
Contact and changes
We may update this policy when production providers or retention settings change. Questions can be sent to support@graffforge.com.