Diese Seite ist derzeit nur auf Englisch verfügbar. Rechtlich maßgeblich ist die englische Fassung.

Privacy Policy

Last updated: September 16, 2026

This policy explains what we collect when you use WrapStudio AI (wrapstudio.ai), what we do with it, and the choices you have. We try to keep this short and plain.

What we collect

Account info — your email and name from the sign-in provider you choose. We don't see or store your password.
Content you upload or create — vehicle photos, generated wrap designs, prompts, and anything you type into the app.
Usage data — which features you used, when a design was generated, credits spent, and errors we hit along the way.
Payments — handled by Stripe. We receive a receipt and the last four digits of your card; we never see your full card number.
Cookies — a session cookie so you stay signed in, an anonymous visitor cookie used for community likes and reports, and — only if you allow it — a product-analytics identifier. The full list is in the Cookies section below.

How we use it

To prevent abuse — automated review of content shared to the public community gallery.
To send you account emails (sign-up confirmation, receipts, important notices).
To improve the product — aggregate usage patterns and debugging.

Who we share it with

To generate your designs, we send the prompts and reference images you provide to our AI generation partners (currently FAL.ai, Replicate, and OpenRouter). They process the input only to return a result.

We do not sell your data. We do not share it for advertising.

Community gallery

We curate a community gallery of wrap designs to showcase what's possible. Featured designs display only the AI-generated wrap image and auto-generated metadata. Phone, email, brand info stored on your account is never displayed on the public page as structured data.

If you see a design in the gallery you'd like removed, use the Report button on its page — it disappears from your view immediately, and if three different visitors report it, we auto-hide it from the public gallery pending a human check.

If your design is featured, we'll email you at the address on your account.

If you subscribe to our newsletter (via the footer form, the newsletter page, or any other opt-in surface), we store your email address, the date you subscribed, and which surface you subscribed from. We use this only to send the newsletter content you opted in to receive.

We use double opt-in — you receive a confirmation email and must click the link to be added to the list.
You can unsubscribe at any time via the link in every email footer. Unsubscribing is processed immediately.
Your email is shared with Resend, our email delivery provider, solely to deliver the newsletter. Resend does not use your address for any other purpose.
If you delete your account, you are unsubscribed from the newsletter at the same time. We keep your address on a suppression list so we don't email you again by mistake.

Data retention

We keep your data while your account is active. When you delete your account, we delete your design images, vehicle photos and assistant conversations, and we anonymize what remains: your email address, name and profile picture are removed from our records, so the usage and payment history we're required to keep for accounting can no longer be connected to you.

Your sign-in account with our authentication provider is deleted separately, and a deleted account can no longer be used to sign in.

Cookies and similar technologies

This is the complete list of what WrapStudio stores in your browser, who receives it, and for how long. Visitors in the EU, EEA and UK — and anyone whose location we cannot tell — are asked before anything in the Analytics row is set; nothing optional loads until you answer, and no answer means no.

Necessary — always on

These make the site work. The legal basis is performance of the contract with you and our legitimate interest in running a secure service (GDPR Art. 6(1)(b) and (f)); under ePrivacy / TDDDG § 25(2) they need no consent.

session — keeps you signed in. WrapStudio. Ends when the session ends.
community_visitor_id, blog_visitor_id — one like or report per visitor, and respecting your block decisions. WrapStudio. 1 year.
eu-consent (browser storage, mirrored in a cookie of the same name) — remembers the choice you made in the cookie banner, with the date and the version of the text you saw. WrapStudio. 1 year, then we ask again.
Sign-in cookies — set by Logto, our sign-in provider, on its own domain while you sign in.
Checkout cookies — set by Stripe on stripe.com during payment (fraud prevention). See Stripe's privacy policy.

Analytics — only with your permission

Legal basis: your consent (GDPR Art. 6(1)(a), TDDDG § 25(1)). You give or refuse it in the banner and can change it at any time via Cookie settings (also in the footer of every page and in the studio menu).

ph_* (cookies and browser storage) — a pseudonymous ID and the events behind it: which features get opened and where people get stuck, and a replay of your session with every input field masked. If you are signed in, the ID is linked to your account so we can follow up on bugs; we do not send your email address. Never included: your designs, your uploads, or anything you type. Provider: PostHog, Inc. (EU-US Data Privacy Framework certified). Kept for 12 months.

When you withdraw consent we stop collecting immediately and clear the identifiers we can reach in your browser; data already collected is deleted when its retention period ends.

Cookieless statistics — no consent needed

Plausible counts page views without cookies, without personal identifiers and without cross-site tracking, so it falls outside the consent requirement. It is listed here for transparency.

Banner text version 2, 16 September 2026. If the list above changes in a way that matters, the banner asks you again.

Your choices

You can download or delete your designs from the dashboard.
You can unshare any community post, which also removes it from the public gallery.
You can request account deletion from the deletion portal in your dashboard. We review each request manually and email you once your account is removed. You can also email [email protected].

Changes

If we update this policy, we'll change the "Last updated" date above and, for material changes, let you know in the app.

Contact

Questions? Email us at [email protected].