Privacy Policy

Last updated 17 October 2026.

The short version

You upload a picture, we send it to an AI model to change the words, and you get a watermarked preview, or — with credits — the full-size image to download. The picture stays in your browser until you press Change text. It is then checked, stored for you, and sent to Black Forest Labs in the United States, a separate company that runs the model under its own terms. We delete a preview you don't buy 72 hours after it was made; a bought image stays in your account until you delete it. You sign in with Google; we keep your Google email address and a random account ID, never your name. Stripe takes your payment and sees your card details; we never do. Our visitor statistics use no cookies and never identify you, and we use no advertising cookies.

What happens to your image

1. In your browser. Your picture, the box you draw and the text you type stay in your browser until you press Change text. If the file is very large or in HEIC format, your browser converts it first.
2. Bot check and your agreement. Pressing Change text runs Cloudflare's Turnstile bot check. The first time, you also tick a box confirming you're 18 or older, accept the Terms, and understand that your image is sent to Black Forest Labs in the United States, which may use it to improve its models. We record that you agreed, the version of the Terms and the time.
3. Upload and the document check. The image is uploaded to our server, running at Cloudflare. It is prepared for the model — turned the right way up, any transparency flattened onto white, embedded metadata such as location removed, and scaled to the size you chose — and an automated check, an AI model run by Cloudflare, looks at it to confirm it isn't a document, receipt, ID or screenshot. A refused image is never stored and never goes further. Cloudflare does not use what it processes for this check to train models and does not keep it after the check.
4. Stored for you. The prepared image, your box and your new text are saved in our storage at Cloudflare, under a random image ID.
5. The edit. The prepared image, the position of your box and your new text are sent to Black Forest Labs, whose FLUX 3 Image Klein model redraws the words. Its result comes back to our storage. Black Forest Labs' own copies are covered under "Who receives your image" below.
6. Preview and download. For a free preview we make a small preview and a close-up from the result, both watermarked; for a change made with credits, or once you buy the image, we make them without the watermark. We serve them only to you (the browser or account that made the edit). When you download, you get the model's output unchanged, carrying its Content Credentials — a signed record inside the file that says the image was made with AI and names the model and Black Forest Labs. It contains nothing about you.
7. 72 hours, or until you delete it. A free preview you don't buy expires 72 hours after it was made — up to 4 hours later if you open it, or start buying it, in its last 2 hours — and is then deleted automatically. You can keep editing a picture you haven't bought for 72 hours after you upload it, and the picture itself is deleted with its last unbought preview. An image you made or bought with credits is kept in My images, with the picture you uploaded, until you delete it or delete your account, and you can keep editing it.

Who receives your image

Black Forest Labs Inc., United States, runs the model and is a separate recipient of your image, not our processor. It receives the prepared image and your new text, and returns the edited image. Its FLUX API Service Terms give it a perpetual licence to inputs and outputs and say it "may use Inputs and Outputs to train and improve its artificial intelligence models"; its Privacy Policy says it retains information "for as long as is reasonably necessary". So Black Forest Labs may use your image to improve its models. We have asked it in writing to exclude our customers' images and will update this page when it confirms. You are told about this transfer, and asked to agree, before your first edit. We send Black Forest Labs no account details: it receives the prepared image, the position of the box and the new text, nothing else about you.

Cloudflare hosts the site, stores your account records and images, runs the document check, the Turnstile bot check, the preview watermarking and the visitor statistics, as our processor under its data processing agreement, which includes the EU Standard Contractual Clauses and the UK Addendum. Our database is in Cloudflare's Asia-Pacific region; your data may pass through Cloudflare's servers in other countries on the way.

Without an account

You can take one free preview without signing in. To make that work, your browser gets a random device ID in a cookie (see Cookies). We store only a scrambled version of it, with: whether the free preview has been used, your agreement to the Terms (version and time), any pause or block from the misuse rules below, and your images until 72 hours after their last preview. We can't tell who a device ID belongs to unless you sign in on that browser; signing in links the device to your account and moves the preview you made there into it.

With an account (ages 18 and over)

You sign in with Google. We keep only what the account needs to work:

• a random account ID;
• the ID Google gives us for you, and your Google email address, so you can see which account you used and so we can match a refund request;
• your agreement to the Terms (version and time);
• your images: bought ones until you delete them, previews for 72 hours — with, for each edit, the box you drew, the new text you typed, the size, when it was made and its status;
• your credits: each pack bought and each time credits are used or returned, as an append-only ledger, and your purchases (Stripe's reference for the checkout, the pack, the amount, the time);
• when the account was created and last used, and when each sign-in happened; sign-ins are stored only as a scrambled code that can't be turned back into the real one.

We never ask for your name. Google will know you signed in to ChangeTextInImage; its own privacy policy applies to that.

Payments

Checkout is run by Stripe, through its Link service, which is the merchant of record for your purchase: your card or bank statement shows "LINK.COM*" and your receipt comes from Link. Stripe collects your payment details, your email address and your billing country; it uses them under its privacy policy to take the payment, work out tax, prevent fraud and handle disputes. We never see your card number. From Stripe we receive the checkout reference, whether it was paid, the amount, and the pack. A refund or a dispute is reported to us the same way, so we can adjust your credits.

Keeping the tool honest

Some processing exists only to stop misuse: the document check above, a block list on the new text, and limits on free previews.

• Refusal log. When an image or text is refused, or the model declines it, we log the time, the reason, the category, the new text you typed, and scrambled codes for your device, your account if signed in, and your network — never the image. Kept 90 days.
• Pauses and blocks. Three refusals in 24 hours pause the device or account for 24 hours; a second pause blocks it. A block on an account survives deleting the account, through the record below.
• After you delete your account we keep, for 12 months, a scrambled code made from your Google sign-in identity, the number of free previews used, and whether the account was blocked — so a deleted account can't be re-created to get more free previews or lift a block. It can't be turned back into your identity.
• Network limits. To stop one network creating many accounts, we count new free previews per network for the day. The IP address is turned into a code with a key that changes daily and is deleted after two days, so the count can't be traced back afterwards. We also use your IP address briefly to limit bursts of requests, without storing it.

Visitor statistics

• Cloudflare Web Analytics runs on every page. It sets no cookies and doesn't identify or follow individual visitors; it tells us totals, such as how many people opened a page and which countries they came from.
• Our own counters count how many times the site and the editor are opened each day, without cookies and without identifying anyone; only daily totals are kept.

We use no Google Analytics and no advertising tools.

Cookies

• Device ID (__Host-cti_d): a random ID set the first time you load the site, lasting 400 days. It gives you your free preview, keeps your preview reachable for 72 hours and applies the misuse rules. It's a random code, not your name or email, and it isn't shared.
• Sign-in (__Host-cti_s): set only when you sign in. Keeps you signed in on this browser for up to 13 months, or until you sign out; it ends sooner after 180 days without using your account. A second cookie (cti_in) only tells the page that you're signed in, lasts as long as your sign-in, and holds no personal information.
• During sign-in: a cookie lasting 10 minutes keeps the Google sign-in secure.
• Turnstile: Cloudflare's bot check runs when you press Change text and is covered by Cloudflare's privacy policy.

We use no advertising cookies. You can block or delete cookies in your browser's settings; without the device cookie the tool can't give you a free preview.

Who handles it

• Cloudflare — hosting, storage and the checks above; our processor (above).
• Black Forest Labs Inc. — the image model; a separate recipient (above).
• Stripe (and its Link service) — payments; merchant of record, so it decides how it handles payment data (above).
• Google — sign-in.
• Healthchecks.io receives only a signal that our background jobs ran, with no personal data.

We keep technical logs to run the service. We write no images and no new text into them, and they're kept for 7 days.

How long we keep it

• A preview you don't buy: expires 72 hours after it was made (up to 4 hours later if you open it, or start buying it, in its last 2 hours), then is deleted automatically. The picture you uploaded is deleted with its last unbought preview. A backstop at the storage level removes anything unbought still there after 7 days.
• A bought image: until you delete it or delete your account.
• Sign-ins: end after 180 days without using your account, and after 13 months at most.
• Your account: until you delete it. We don't delete accounts automatically at the moment, and an account that holds credits is never deleted automatically.
• After you delete your account: everything above is deleted. We keep the purchase and credit records needed for accounting and tax (Singapore requires at least 5 years), and the 12-month record described under "Keeping the tool honest".
• Refusal log: 90 days. The daily key that turns IP addresses into network codes: 2 days; network codes in our daily counters: 8 days.
• Model-call records (which size, which day, what it cost us) are kept 13 months and contain no personal data.
• Deleted records can remain in our database's point-in-time backups for up to 30 days; they're used only to recover from a serious fault.
• If you email us, we use your address and message only to reply.

Your choices and rights

You can delete any image, or your whole account, on your account page; deleting the account also deletes your images and any credits left, and we warn you first. You can also ask us for a copy of your data, or ask us to correct it, delete it, or limit or stop how we use it — email support@changetextinimage.app from the Google address you signed in with. Where we rely on your consent, you can withdraw it at any time by deleting your account or emailing us; this doesn't change what was done before. We make no automated decisions about you with legal effect; the document check and the misuse rules decide only whether you can make edits here. If you think a refusal, a pause or a block is wrong, email us and we'll look.

After you delete your account, ChangeTextInImage may still be listed among your Google account's connected apps, under the name "Change Text in Image"; you can remove it there. For your payment data, Stripe and Link are responsible; you can manage orders and request deletion at link.com.

If you're unhappy with how we handle your data, you can complain to Singapore's Personal Data Protection Commission, the UK Information Commissioner's Office, or the data protection authority where you live.

Why we use it

For readers in the EU and UK: we process your image, box and text, and keep your account, credits and purchases, to provide the service you asked for (a contract). We send your image to Black Forest Labs because the edit can't be made without it, and you're told and asked to agree before the first edit. We run the document check, the block list, the refusal log, the limits and the 12-month record because we have a legitimate interest — and an obligation to our model provider — in keeping the tool from being used for forgery and fraud. We count visits with Cloudflare Web Analytics and our own daily counters because we have a legitimate interest in knowing how often the site and the editor are used; neither identifies you. We keep purchase records because the law requires it.

In Singapore, under the Personal Data Protection Act, we rely on your consent for the account and the edit, and on the legitimate-interests and business-improvement exceptions for the misuse rules and the statistics. Questions about this go to our data protection officer at support@changetextinimage.app.

Children

The service is for people aged 18 and over, and you confirm this before your first edit. We don't knowingly collect anything from anyone under 18, and the Terms rule out images of anyone under 18. If we learn that an account belongs to someone under 18, we delete it; to tell us, email support@changetextinimage.app.

Who is responsible

ChangeTextInImage is run by Summercloude Pte. Ltd. in Singapore, which is responsible for your personal data on this site. For any privacy question, or to reach our data protection officer, email support@changetextinimage.app.

Changes

If this changes — for example if Black Forest Labs confirms the training opt-out, or we add a new processor — we'll update this page and the date above first. A change that affects what you agreed to before your first edit asks you to agree again.