Legal
Privacy Policy
What Aetheris collects, why, who processes it, and the choices you have.
Last updated 11 September 2026
Legal review requiredThis document is a structured draft describing how Aetheris works today. It is pending review by our legal counsel and is not legal advice; governing law, company details and dispute terms will be stated after that review.
What we collect
Aetheris collects only what the service needs:
- Account details: your email address, the display name you choose, and a password stored in hashed form by our authentication provider.
- Abuse prevention and free quotas: salted one-way IP hashes recorded at registration and guest product development. The raw address is not stored. Free products are shared by registration IP and guest IP in 30-day windows. Monthly registered-IP rankings include returning members, and the first 100 eligible IPs receive the larger free allowance. Hashed quota windows and successful free-product usage are retained after account or product deletion so deletion does not reset shared quota. IP hashes never authorize access to another person's private work.
- Your designs: the descriptions, settings and reference images you provide, the concept images created for you, and every version of a design.
- Credits and payments: your credit history, and, once Aetheris Plus opens, subscription records. Card details are handled by Stripe and never reach Aetheris.
- Technical logs: request identifiers, timings and errors needed to run the service. Logs never contain passwords, keys or full personal records.
Why we use it
To provide the service you asked for, keep it secure, prevent abuse, handle billing and answer your questions. Aetheris does not sell personal data and does not use advertising trackers.
Who processes it
Aetheris runs on a small number of providers that process data on our behalf:
- Supabase: authentication, database and file storage.
- Vercel: hosting.
- AI image providers: receive your description and any reference image to generate concept images. Your email address and account details are not sent to them.
- Stripe (when Aetheris Plus opens): payments.
How long we keep it
Account data and designs are kept while your account exists. When an account is deleted, its credit history is kept as a financial record in a form that contains only an internal identifier, not your email or name.
Design conversations and reference photos
When you design with Aetheris you describe what you want in conversation and may attach reference photos. Your messages and photos are stored with your design so the conversation can continue, and they are processed by the AI services we use to understand your request and to draw the concept. They are never used to advertise to you and never shown to other members.
From the conversation, Aetheris keeps an internal, structured reading of your design (for example the metal or the shape you asked for, and what a reference photo appears to show). Where you did not decide something, Aetheris may make a provisional creative choice for the concept; such choices are recorded as Aetheris' own and are confirmed with you before anything is priced or made.
Private review links
Sharing a design for review is optional. Anyone with your review link, including someone it is forwarded to, can see only the versions, approved review images and display text you include. Your design conversation and reference uploads are not shared. A price is shared only when you explicitly allow an eligible studio-reviewed price.
You can stop sharing or replace a link. This blocks future access, but images already downloaded cannot be recalled. Reviewers may send a plain-text note and an optional display name if you allow feedback; names are unverified and notes are visible only to the design owner. No reviewer email or account is required.
An essential, path-scoped, httpOnly cookie keeps access to an opened review for up to eight hours. Access tokens are stored as hashes. Salted network signals and temporary request counters help limit abuse; these are not advertising identifiers. Review notes are kept with the owner's design and account.
Support conversations
When you write to us in the support chatbox — as a member or as a guest — the conversation may be stored, together with the page, design, order or quote you asked about, so we can answer you and keep the thread in one place.
Guests may optionally give an email address; it is used only to tell you when we reply, and you can add, change or remove it in the chat at any time. If you give no email, we may only be able to respond while you are on the site, or when you return in the same browser and session.
A secure httpOnly guest-design cookie keeps your one free product and its generated versions associated with this browser for up to one year. Only a hash of its random token is stored. Clearing it can lose guest access; register to keep your product across devices. We record a salted IP signal to limit abuse. No advertising identity is created. A secure support cookie holding a random token keeps a guest's conversation continuous and helps us prevent abuse. It is not used for advertising. Guest support records are kept for up to 30 days; a member's conversations are kept with their account. Security, legal compliance, disputes or ongoing service may require us to keep some records longer.
Cookies
Aetheris uses the cookies needed to keep you signed in, plus one first-party cookie holding a random identifier so we can measure how visits lead to designs and orders, and, if you use the support chatbox as a guest, one secure cookie that keeps your conversation continuous. They contain no personal data and are never shared with advertising networks. Opening a private review also sets the essential eight-hour review-access cookie described above. There are no advertising or cross-site tracking cookies.
Your choices
You can change your display name and password from your account, and ask for your account to be deleted. Aetheris is not intended for children under 18.
We may update this policy; material changes are announced on this page with a new date.
Questions about these policies? Reply to any email from Aetheris, or use the contact page once it is available.