Privacy
Privacy Policy
Last updated: October 17, 2026
1. Local-first
ElserStudio is built around a local workflow. Project databases, imported files, and local generation results are stored on your device by default. Uninstalling the app may not remove project files automatically; you can manage them through the app or your operating system.
2. Cloud and third-party models
When you choose cloud generation, sync, or a third-party model, prompts, reference media, generation settings, and necessary account information may be sent to the selected service to complete the request. Those services also process data under their own privacy policies.
3. API keys
API keys configured in the desktop app are stored using operating-system security capabilities. Never post API keys in GitHub Issues, screenshots, or public logs.
4. Website data
Website accounts reuse Studio identities with verified-email registration and password recovery. Host-only HttpOnly session cookies last up to one day; a separate cookie protects form submissions. Passwords and login credentials are not shared with Bots. Funding uses WeChat Pay or Stripe and credits are added only after server verification. Individual OAuth grants can be revoked on the account page. Cloud generation processes prompts, selected references and outputs; output access currently lasts seven days and download links five minutes. Access expiry does not guarantee physical deletion from storage or backups; contact support for deletion requests. Website analytics do not read account or authorization form contents. This website uses Google Analytics 4 to measure page visits, traffic sources and website usage so we can improve the site. Google Analytics uses first-party cookies to distinguish visitors and sessions, and Google processes the data under its privacy policy. GitHub may record necessary network and download information under its own policies when you download installation files.
5. Contact and data requests
support@elser.ai — For privacy or deletion requests, describe only the request type—do not post personal content, project files, credentials, or other sensitive information. The team will provide a private follow-up channel when needed.