Privacy
Privacy policy
This policy explains how ThumbSignal handles account data, prompts, uploaded reference images, generated thumbnails, credits, support messages, and billing records.
Effective: August 10, 2026
Last updated: August 27, 2026
Questions? Contact support@madebyblankmargin.com.
Controller and privacy contact
The controller responsible for ThumbSignal is Ioannis Kosmas, c/o COCENTER, Koppoldstr. 1, 86551 Aichach, Germany. Privacy requests and other data-protection enquiries can be sent to support@madebyblankmargin.com.
Information we collect
We collect the information needed to provide ThumbSignal, keep accounts secure, process payments, prevent abuse, and support users.
- Account data, such as email address, authentication ID, session information, and account status.
- Generation and review data, such as video ideas, prompts, descriptions, selected niche, style, image ratio, thumbnail text, uploaded-reference records, generated-output records, Packaging Score reports, comparison results, request status, and credit use.
- Billing data, such as Stripe customer, subscription, checkout, price, invoice, top-up, and webhook event identifiers. Card details are handled by Stripe and are not stored by ThumbSignal.
- Support and operations data, such as messages you send us, request metadata, error details, abuse-prevention signals, and basic technical logs.
Uploaded references and generated outputs
Reference uploads are input material used to guide a generation. In production, reference uploads and generated outputs are stored separately and associated with your account; they are not published in a public gallery by default.
Generated thumbnail outputs and completed score reviews are stored so you can download images, browse your Library, reopen paid reviews, compare candidates, and receive support. Access is limited through account and storage controls, but you should still avoid uploading sensitive personal data, illegal material, or content you do not have the right to use.
How we use information
We use information to authenticate users, generate thumbnails, manage credits, store history, process payments, provide support, troubleshoot failures, prevent abuse, enforce terms, improve reliability, and comply with legal or payment obligations.
We do not sell personal information. We do not use your private uploads or prompts for public marketing without permission.
Legal bases and essential storage
Where EU or UK data-protection law applies, we process account, generation, review, and billing data as needed to perform the contract with you; comply with payment, tax, security, and other legal obligations; and pursue legitimate interests such as operating, securing, supporting, and preventing abuse of the service. We rely on consent where the law requires it.
ThumbSignal uses essential authentication and session storage, security controls, and checkout state needed for the features you request. ThumbSignal does not currently use advertising cookies or behavioral analytics on the public site.
Service providers
ThumbSignal relies on service providers to operate the product. These providers process data only as needed to provide their services to us, subject to their own terms and data-processing commitments.
- Clerk for authentication, sessions, and account identity.
- Supabase for database records and storage of reference uploads and generated outputs.
- Stripe for checkout, subscriptions, top-ups, invoices, payment status, taxes where configured, and billing records.
- OpenAI for image-generation requests when the real image provider is enabled.
- Google Gemini for Packaging Score image reviews when Gemini scoring is enabled.
Retention and deletion
We keep account, generation, upload, output, billing, and support records for as long as needed to provide the service, maintain history, resolve disputes, prevent abuse, comply with legal obligations, and keep financial records.
You can request deletion or export of account data by emailing support@madebyblankmargin.com. We may need to verify your account before processing the request.
Some records may be retained after deletion requests when required for payment, tax, fraud-prevention, security, dispute, or legal reasons.
Security and international processing
We use reasonable technical and organizational safeguards, including provider-managed authentication, server-side secret handling, separate storage for inputs and outputs, and access controls around operational systems.
No internet service can guarantee perfect security. ThumbSignal and its providers may process and store data in the United States, the European Economic Area, the United Kingdom, or other locations where they operate.
Your privacy rights
Depending on where you live, including in the EU, UK, and parts of the United States, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal data.
To exercise a privacy right, email support@madebyblankmargin.com. If you are in the EU or UK, you may also have the right to complain to your local data protection authority.
Children and policy changes
ThumbSignal is not intended for children. You must be at least 18, or the age of majority where you live, to create an account or purchase credits.
We may update this policy as the product, providers, laws, or business operations change. The last updated date above shows when this page was last changed.