Privacy Policy

Overview

DitherBox provides browser-based tools for editing images, GIFs, and video. DitherBox operates this service. You can contact us at support@ditherbox.xyz.

Your media is processed in your browser. Importing, editing, and exporting media do not upload the source or finished media to the DitherBox server. If you choose to save a project on this device, its media and settings are stored in your browser storage.

Information we handle

Account: name, email address, password hash and salt, plan, account creation and last sign-in times, and when new users agreed to the Terms. We do not store plaintext passwords.
Sessions: a hashed session token in our database. Your browser receives an essential, secure, HttpOnly sign-in cookie that lasts up to seven days unless you sign out sooner.
Saved presets: preset names and editing settings you choose to save to your account. These are stored on our server so you can access them after signing in.
Security and operations: short-lived hashed identifiers derived from your email address and IP address to limit repeated sign-in attempts. Server and proxy error logs may include your IP address, request path, time, and diagnostic details.
On your device: imported media, local project files and settings, and exports remain in your browser or in files you download. Clearing browser storage can remove locally saved projects.

We do not currently use advertising or analytics cookies. If paid subscriptions are enabled, Stripe handles checkout and payment details. We receive a Stripe customer identifier, subscription status, price identifier, and billing period information to manage access; we do not receive full card numbers.

How we use information

We use account and session information to register you, sign you in, keep your account available, and apply the features in your plan. We use saved presets to provide the account sync feature. We use limited technical information to prevent abuse, diagnose failures, and operate the service. Where data protection law requires a legal basis, account operation is needed to provide the service you request, and security processing supports our legitimate interest in protecting the service and its users.

Storage and retention

Account details and account-saved presets are kept while your account exists, unless a longer period is required by law. Session cookies expire after seven days; signing out revokes the active session. Authentication throttle records are removed by a daily job after they are more than 24 hours old. Daily database backups are kept on the VPS for approximately 30 days before automatic removal. Operational logs are retained according to the server's log rotation settings and only as needed to operate and secure the service.

We may need time to remove information from existing backups. If a backup is restored, we will reapply outstanding deletion requests. Local projects and media on your device are controlled through your browser and files; we cannot remove those copies remotely.

Your choices and rights

You can sign out from the studio at any time. You can remove locally saved projects through your browser or device. To request access to, correction of, or deletion of account information and synced presets, email support@ditherbox.xyz. Your rights depend on the law that applies where you live; you may also be able to complain to a relevant data protection authority.

We may update this policy as the service changes. Material changes will be posted here with a new effective date.

Contact