Ink Desk · Privacy · updated 18 October 2026

Privacy

What Ink Desk keeps about you, where it is kept, and who else sees it.

What is stored

• Your projects — titles, pitches and scenarios, the story, the cast and their descriptions, the plan, page scripts and speech bubbles, and what each generation cost.
• Pictures — every image drawn for you, and the pictures you upload. Uploads are re-encoded when they arrive, which removes their hidden metadata (camera details, GPS location).
• Export files — if you ask for a copy of your data in Settings, one zip is kept in the outputs bucket (a private part of Cloudflare R2) for you to download. Only your latest export is kept; a new one replaces the last.
• Generation records — what was asked to be drawn, when, whether it worked, and its cost.
• Your account — kept by Ink Desk itself, in its own database: your email address, your password stored only as a one-way hash (never the password itself), your active sessions and the browser each one was made from, your account id, and the date the account was made.

Your work is visible only to you, unless you share it yourself. When you choose Share publicly on a project, the studio makes a link of the form /s/…. Anyone who has that link can read the page without signing in: the title, the cover, the finished pages and their speech bubbles, and the names of the characters who speak. It is a copy taken at that moment, so later edits stay private until you press Update share. It does not carry your email address, your name, your scenario or your notes. Search engines are asked not to list it, but anyone you give the link to can pass it on. Unpublish turns the link off at once.

Anyone reading a shared page can press Report. A report keeps the reason, the short note they may add, the time, and a hashed form of their network address (a one-way scrambling, not the address itself). It shows the page’s title to the person reading reports, never your account.

Which services see what

• Signing in involves no outside service: you sign in with an email and a password that the studio checks itself, and it sends no email at all.
• Anthropic (Claude) writes the story text, and OpenRouter passes requests to the image model, to a backup text model and, when you animate a page, to the video, voice and music models: they receive the words, the reference pictures, the panels and character sheets, and the lines to be spoken that are sent with each generation, not your email address. Their own privacy policies apply to what they receive.
• MongoDB holds your projects and records, and Cloudflare R2 holds the pictures and videos. Neither is public; a picture reaches your browser only through the studio, after it has checked that it is yours.
• Railway hosts the studio and keeps its logs, which record requests and errors. An error shown to you carries a short reference instead of details.

No advertising, no analytics trackers, and nothing is sold. The only cookie is the studio’s own session cookie, which keeps you signed in.

Deleting your data

In Settings › Data and privacy, Export my data gives you one zip with your account details, your settings, your shared links and every project with its pictures. Delete my account removes your projects, pictures, uploads, videos, shared links (they stop working at once), the reports about them, export files, usage counters and settings, and then your sign-in: your password and every session. It cannot be undone. A few things stay: a minimal record of the account (your account id and the dates it was created and deleted, no email), kept so the account cannot be brought back by mistake; the studio’s own anonymous spend totals, which hold no names and none of your work; server logs and backups, until they expire; and, rarely, a picture that no record of yours names, which cannot be traced to you to be removed. If you cannot sign in, use the contact address on this page once it is published from the email address on your account and it will be done for you.

Changes

If this page changes, the date at the top changes with it.

See also: Terms — what the studio may be used for.