Privacy policy

The controller responsible for ThumbFocus is Ioannis Kosmas, c/o COCENTER, Koppoldstr. 1, 86551 Aichach, Germany. Privacy requests and other data-protection enquiries can be sent to support@madebyblankmargin.com.

We collect the information needed to provide ThumbFocus, keep accounts secure, process payments, prevent abuse, and support users.

• Account data, such as email address, authentication ID, session information, and account status.
• Generation and review data, such as video ideas, prompts, descriptions, selected niche, style, image ratio, thumbnail text, uploaded-reference records, generated-output records, Packaging Score reports, comparison results, request status, and credit use.
• Billing data, such as Stripe customer, subscription, checkout, price, invoice, top-up, and webhook event identifiers. Card details are handled by Stripe and are not stored by ThumbFocus.
• Support and operations data, such as messages you send us, request metadata, error details, abuse-prevention signals, and basic technical logs. Free-trial abuse controls use a daily keyed hash of the network address; provider-usage records older than seven days are removed when the next new request is processed. The application does not store the raw network address in that usage table.

Reference uploads are input material used to guide a generation. In production, reference uploads and generated outputs are stored separately and associated with your account; they are not published in a public gallery by default.

Generated thumbnail outputs and completed score reviews are stored so you can download images, browse your Library, reopen paid reviews, compare candidates, and receive support. Access is limited through account and storage controls, but you should still avoid uploading sensitive personal data, illegal material, or content you do not have the right to use.

We use information to authenticate users, generate thumbnails, manage credits, store history, process payments, provide support, troubleshoot failures, prevent abuse, enforce terms, improve reliability, and comply with legal or payment obligations.

We do not sell personal information. We do not use your private uploads or prompts for public marketing without permission.

Where EU or UK data-protection law applies, we process account, generation, review, and billing data as needed to perform the contract with you; comply with payment, tax, security, and other legal obligations; and pursue legitimate interests such as operating, securing, supporting, and preventing abuse of the service. We rely on consent where the law requires it.

ThumbFocus uses essential authentication and session storage, security controls, and checkout state needed for the features you request. ThumbFocus does not use advertising cookies.

We use Vercel Web Analytics to understand aggregate visitor counts, page views, referring websites, countries, devices, and browsers, and to improve the website. This analytics integration does not use cookies or associate visits with your account identity.

We measure known page paths on our production website. We remove query parameters and URL fragments and exclude authentication callback paths and unknown paths before sending page views. We do not send thumbnail titles, prompts, images, email addresses, or account IDs as analytics properties. Vercel uses a request-derived hash to distinguish visitors, with visitor sessions discarded after 24 hours.

ThumbFocus relies on service providers to operate the product. These providers process data only as needed to provide their services to us, subject to their own terms and data-processing commitments.

• Vercel for website hosting and aggregate website analytics.
• Clerk for authentication, sessions, and account identity.
• Supabase for database records and storage of reference uploads and generated outputs.
• Stripe for checkout, subscriptions, top-ups, invoices, payment status, taxes where configured, and billing records.
• OpenAI for image-generation requests when the real image provider is enabled.
• Google Gemini for Packaging Score image reviews when Gemini scoring is enabled.

We keep account, generation, upload, output, billing, and support records for as long as needed to provide the service, maintain history, resolve disputes, prevent abuse, comply with legal obligations, and keep financial records.

You can export account data and delete your account in Account settings, or contact support@madebyblankmargin.com. Account deletion cancels recurring billing and removes stored images, reviews, your application profile and sign-in account. We may need to verify requests sent by email.

Some records may be retained after deletion requests when required for payment, tax, fraud-prevention, security, dispute, or legal reasons.

We use reasonable technical and organizational safeguards, including provider-managed authentication, server-side secret handling, separate storage for inputs and outputs, and access controls around operational systems.

No internet service can guarantee perfect security. ThumbFocus and its providers may process and store data in the United States, the European Economic Area, the United Kingdom, or other locations where they operate.

Depending on where you live, including in the EU, UK, and parts of the United States, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal data.

To exercise a privacy right, email support@madebyblankmargin.com. If you are in the EU or UK, you may also have the right to complain to your local data protection authority.

ThumbFocus is not intended for children. You must be at least 18, or the age of majority where you live, to create an account or purchase credits.

We may update this policy as the product, providers, laws, or business operations change. The last updated date above shows when this page was last changed.