Firestarter DancePrivacy
Last updated: 24 October 2026. This page says what we collect when you order a clip, who handles it, how long we keep it, and what you can ask us to do. It describes the service as it runs; if that changes, this page changes with it.
Who we are
Firestarter Dance is the controller of the personal data described here. Firestarter Dance is run by an independent developer based in Japan. Contact: hello@firestarterdance.com.
What we collect
- Photos you upload for a clip.
- Photo check results: while you pay, an AI model looks at each photo for nudity, graphic violence and anyone who may be under 18. We keep only the result, with the order it belongs to; never the photo and never the model's answer. If a photo is refused before payment completes, the checkout is cancelled, nothing is charged and you are asked to pick another photo; that photo is deleted when the unpaid order expires, 24 hours after it was placed. If it is refused after you have paid, no video is made, the payment is refunded automatically, and the photo is deleted with the other files of a failed order, after 7 days.
- Checkout email: the email you give at Stripe's checkout, stored with the order so we can email you about it.
- Order data: the model, quality, amount paid, order id, and the status of the order and its clip.
- Payment identifiers from Stripe: the amount, currency, payment reference and the email you give at checkout. Card details are entered at Stripe and never reach us.
- Request logs: Cloudflare logs each request to the site, with address, user agent and network.
- Page views: Cloudflare Web Analytics counts each page view, with the page, the site you came from, your browser, operating system, device type and country, and how fast the page loaded. It sets no cookie and stores nothing on your device. It is off for visitors in the EU, and Cloudflare keeps these counts under its own retention.
- Visit statistics: a random visitor ID from a cookie, the site and page you came from (the pages you read note the first site and page and pass them to the page where you make a clip, which keeps them in the source cookie; the page you open it from, and the site when there is no cookie, are what your browser reports as the referrer when you open that page), and which steps toward an order you reached (see Cookies).
- A truncated IP hash, kept to limit how many orders one visitor can place in an hour and how many visits we count from one connection in a day. We do not keep the address itself.
Why we use it
- To make and deliver your clip, and keep your orders together (to perform our contract with you).
- To take payment, handle refunds, and keep accounting records (contract and legal obligation).
- To apply the first-clip price: we check whether this browser has already paid for a clip that was not refunded (to perform our contract with you).
- To email you about your order, at the email you gave at checkout: when your clip is ready, or when it could not be made and you were refunded (to perform our contract with you).
- To prevent abuse and enforce the acceptable use rules, including the photo check that runs while you pay (our legitimate interest).
- To see which pages bring visitors and where they drop off (our legitimate interest).
- To answer your emails.
We do not sell your data and we do not use your photos to train any model. We send no marketing emails. The only emails we send are about your own orders: when your clip is ready, and when an order failed and was refunded.
Who processes it
- Stripe: payment processing. Firestarter Dance is the seller.
- Cloudflare: hosts the site, stores photos and clips, keeps request logs, runs the AI model that checks each photo while you pay, and sends our order emails.
- Our model providers, running the model you pick (Seedance 2.5 by ByteDance or Wan 3.0): generate your clip from your photo. Our main model provider keeps its own copies of uploaded files for about 14 days, so its copies can outlast ours.
We also disclose data when the law requires it, or to report illegal content. We take reasonable care to secure it: uploads sit in private storage.
How long we keep it
| Data | Kept |
|---|---|
| Photos of a paid order | While the clip is made, then deleted with the clip 7 days after delivery |
| Finished clip | 7 days after delivery |
| Photos of an unpaid order | Deleted when the order expires, 24 hours after it was placed |
| Photos of a failed or refunded order | 7 days after failure or refund |
| Order record (id, model, quality, amount paid, payment identifiers) | Kept after the files are deleted, for accounting |
| Photo check result (passed, refused or flagged, with the order id; never the photo) | 90 days |
| Record of order emails (which email, for which order, sent or failed; not your address) | 90 days |
| Email you gave at checkout | Deleted 24 hours after the order if it is never paid; 7 days after delivery for a delivered order; 7 days after failure or refund for a failed or refunded order. Copies in daily backups are deleted as those backups expire, within 90 days |
| Request logs | As Cloudflare keeps them under its own retention |
| IP hash | Short-term, for rate limiting |
| Visit statistics (a random visitor ID, the site and page you arrived from, and how far you got: checkout, payment, delivery) | 400 days |
| Daily backups of orders, payment records and visit statistics | 90 days, then deleted |
Your rights
- Access and export: write to us and we send you what we hold, in a readable file.
- Deletion: write to us at hello@firestarterdance.com and we will delete the email you gave at checkout. Order records stay for accounting, without your identity. Copies in our daily backups are deleted as those backups expire, within 90 days.
- Correction and objection: write to us.
We answer within 30 days. If you think we handled your data wrongly, you can complain to your local data protection authority.
Cookies
There are three cookies, all first-party: set by firestarterdance.com and read only by us. The visitor cookie holds a random ID. Our server sets it when you open the page where you make a clip or when you place an order, and it lasts 30 days, so we count people rather than page loads. If you place an order, this ID is stored with it so we can see which page led to the order, and we use it to tell whether this browser has already paid for a clip that was not refunded, which decides whether the first-clip price applies. The order-access cookie is set for each order you place and lasts 30 days: it holds only an access code for that one order, lets your browser open your own order page, and is HttpOnly, so page scripts cannot read it. The source cookie (trm_src) is set by the page where you make a clip, and only when the link you followed to it carries your first source. It records the first site that referred you, or the campaign tag on the link if it had one, and the page you first landed on. It lasts 30 days and is HttpOnly. None of the three contains a name, email or IP address, and none is shared with anyone else or used for advertising. There is no advertising or third-party tracking cookie.
Besides cookies, the pages you read before ordering keep an item in your browser's local storage called fd-first-touch. It holds the first site that referred you, the path of the page you first landed on and, if the link you arrived by had one, its campaign tag. The pages add these to the links to the page where you make a clip, which is how the source cookie gets its values. The item stays until you clear this site's data in your browser. Three more small items stay in your browser and are not sent to us: theme (local storage), your light or dark choice, kept by the pages you read; trm-first-clip (local storage), a marker so the first-clip notice shows only once; and trm-resume (IndexedDB), a compressed copy of your photos and choices that the page where you make a clip keeps while you are at checkout, so Back from the payment page finds them. The copy is deleted once your order page shows the order as paid or, if more than 1 hour has passed, the next time you open the page where you make a clip. Your photos upload only when you press Pay.
Children
The service is for people aged 18 or over. We do not knowingly collect data from anyone under 18, and photos of minors are not allowed. If you think a child's data is with us, write to us and we delete it.
International transfers
Our providers run services worldwide, so your data may be processed outside your country. Each provider applies its own safeguards.
Changes
If we change this page, we update the date at the top.
Contact
Questions or requests: hello@firestarterdance.com, with the order id if you have one.