Privacy Policy
Updated October 20, 2026
Who we are
MOSS Studio operates mossimageai.online. Contact support@mossimageai.online for privacy questions, access, correction, or deletion requests.
Information processed
We process account email and identity information supplied through email or Google sign-in; prompts, generation settings and outputs; credit balances and transaction records; and payment references and subscription status. Payment card details are handled by Stripe, not stored by MOSS Studio.
Why and with whom
We use information to authenticate accounts, generate images, deliver credits, manage subscriptions, prevent abuse, and respond to support requests. Necessary data is processed by authentication, hosting, image-processing, email, payment, and analytics service providers. Prompts and settings are sent to the image-processing service to fulfill generation requests.
Analytics and cookies
We use authentication cookies for sign-in and Google Analytics to measure page visits and purchase flows. We do not intentionally send emails, prompts, generated content, authentication tokens, or payment card details to analytics. Your browser settings and blocking tools may restrict analytics.
Retention and deletion
Account, generation, and billing records are retained to provide your account and history, resolve disputes, and meet applicable obligations. To request deletion, email support@mossimageai.online. Records required for billing, fraud prevention, or legal obligations may need to be retained. Generated image availability is not guaranteed; download images you wish to keep.
International processing and choices
Service providers may process information in countries other than your own. Depending on applicable law, you may have access, correction, deletion, objection, or other privacy rights. Contact support@mossimageai.online to make a request. We do not sell your prompts or account information.
Signup abuse prevention
We use Cloudflare Turnstile and a first-party device cookie to reduce automated signups and repeated welcome-credit claims. Eligibility checks use hashed email, device, and network identifiers. These safeguards do not use browser fingerprinting.