Whipmash ("we", "us", "our") operates the website at whipmash.com. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

By using Whipmash you agree to the practices described here. If you do not agree, please do not use the service.

1. Information We Collect

Account information. When you create an account via magic link email, we store your email address and a display name.

User-generated content. Vehicle mashups, AI-generated backgrounds, and AI-generated videos you produce are stored on our servers and linked to your account. Comments and posts you submit to the Feed are stored and publicly visible.

Token and purchase records. We keep a record of your daily token usage and purchased-token balance. When you buy tokens, we store a reference to the Stripe payment session ID so we can correctly credit your account and prevent duplicate credits. We do not store full card numbers or payment details — those are handled entirely by Stripe.

Usage data. Standard web server logs (IP address, user-agent, page requested, timestamp) may be retained for security and abuse prevention.

2. How We Use Your Information

• To provide and operate the service (authentication, content storage, token accounting)
• To process purchases and credit your token balance
• To display your content on the Feed and your public profile page
• To detect and prevent fraud or abuse
• To communicate with you about your account (e.g., magic link emails)

We do not sell your personal information to third parties, and we do not use your data for advertising profiling.

3. Third-Party Services

Whipmash relies on the following third-party providers. Each has its own privacy policy and data practices:

• Supabase — database, authentication, and file metadata. Data is stored in the EU (Ireland) region. Supabase Privacy Policy.
• Atlas Cloud — processes the parent-vehicle images you select in order to generate your mashup images, backgrounds, and videos. Images are sent to Atlas Cloud's API servers. Atlas Cloud API data is not used to train models under their API terms.
• Cloudflare R2 — stores all generated images and videos. Data is served via Cloudflare's global CDN. Cloudflare Privacy Policy.
• Stripe — processes all payments. We transmit your purchase amount and a session token to Stripe; Stripe collects and handles card details directly. Stripe Privacy Policy.
• Hostinger — our web hosting provider. Server log files are stored on Hostinger infrastructure. Hostinger Privacy Policy.

4. Cookies and Sessions

We set a single first-party session cookie (wm_session) to keep you logged in. This cookie contains a signed JSON Web Token (JWT) that identifies your account. It is not used for tracking or advertising.

No third-party advertising or analytics cookies are set by Whipmash.

5. Public Content

Your username, profile page, vehicle mashups, Feed posts, and comments are publicly visible to all visitors, including visitors who are not logged in. If you do not want content to be public, do not post it.

6. Data Retention

Your account data and generated content are retained for as long as your account is active. Deleted posts and comments are removed from public view immediately. If you wish to delete your account and all associated data, contact us at the address below.

7. Children's Privacy

Whipmash is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us and we will delete the account promptly.

8. Your Rights

Depending on your location you may have rights to access, correct, export, or delete personal data we hold about you. To exercise any of these rights, email us at legal@whipmash.com. We will respond within 30 days.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Effective date" at the top of this page will reflect the most recent revision. Continued use of the service after a change constitutes acceptance of the updated policy.

10. Contact

Questions about this Privacy Policy? Email us at legal@whipmash.com.