Privacy Policy

Last updated: September 27, 2026

Protecting your personal data is a priority for NanoThumbnail. This privacy policy explains how we handle data when you use our thumbnail generator.

1. Data Collection and "Bring Your Own Key" Principle

NanoThumbnail operates on a decentralized model ("Client-Side").

API Keys (Replicate, Google Gemini, OpenRouter)

Storage: Your API keys are stored exclusively in your browser, either in local storage (LocalStorage) or, if you choose "This session only", in session storage, which is cleared when the tab is closed.
Google Gemini: requests are sent directly from your browser to Google's API.
OpenRouter: requests are sent directly from your browser to OpenRouter's API, which routes them to Google's models.
Replicate: Replicate does not accept requests from web browsers, so requests (including your key, in the Authorization header) are relayed by a serverless function hosted on Netlify. This function only forwards requests to Replicate's API and returns the response; it does not store or log your key, prompts or images. Its source code is public.
No user database: NanoThumbnail has no accounts and no database.

Generated Data (Prompts, Images, People, Brand Kit)

Your projects, generated images, reference images, saved people (face photos) and brand kit are stored locally in your browser (IndexedDB). They never leave your device, except when sent to the AI provider you selected in order to generate or analyse an image. We invite you to consult the privacy policies of Replicate , Google and OpenRouter to understand how they process this data.

Photos of people you save are processed only on your device and by your chosen provider. Only upload photos of people who have agreed to it.

2. Cookies and Trackers

Functional Cookies

The site uses LocalStorage and IndexedDB (browser storage technologies similar to cookies) solely to save your preferences (theme, language, API key) and your work. These data are strictly necessary for the service to function and stay on your device.

Audience Measurement Cookies

We do not use any intrusive tracking, advertising, or third-party analytics cookies (Google Analytics, etc.).

3. Data Sharing

NanoThumbnail does not sell, rent, or share any of your personal data with third parties, as we do not collect it.

4. Your Rights (GDPR)

Since your data is stored on your own device:

Access and portability: You can export all your data at any time from Settings › "Export everything (.zip)".
Deletion: You can delete your API key by clearing the field in Settings, delete projects and people in the interface, or erase everything by clearing this site's data in your browser.

5. Contact

For any questions regarding this policy, you can contact us at: contact@yoandev.co