Try for free

Privacy Policy

Last updated: September 15, 2026

Not legal advice. This document has not been reviewed by a legal professional. It is recommended before the service opens to a large public audience.

1. Data controller

Personal data collected via ThumbnailMaker is processed by Aymane Senhaji, an individual operating as a sole trader, based in Rabat, Morocco, acting as data controller. Contact: contact@thumbnailmaker.so.

2. Data we collect

  • Account data: email address, password (stored encrypted by our authentication provider, never in plain text).
  • Content submitted to generate thumbnails: text descriptions you enter. The Service does not accept photographs of people.
  • Generated thumbnails: images produced by the Service are kept in your history, associated with your account.
  • Usage data: number of credits consumed, generation dates, style chosen.
  • YouTube video URLs that you voluntarily submit to the title-import tool or the public thumbnail viewer tool — only the video's public metadata (title, author) is retrieved, and no data is collected about visitors to the public tool.

3. Purpose of processing

Your data is used to:

  • create and manage your user account;
  • generate the thumbnails you request, including by sending your prompt to our artificial intelligence model provider (Google, Gemini API) solely for that generation;
  • manage your generation credit balance;
  • contact you when necessary for the operation of the Service (account security, important changes).

Your data is never sold or used for advertising purposes by ThumbnailMaker.

4. Legal basis

Processing of your data is based on performance of the contract formed with ThumbnailMaker when you create your account (use of the Service).

5. Data recipients

Your data is hosted and processed by the following providers:

  • Supabase — hosting of the database, authentication, and image storage (generated thumbnails);
  • Google (Gemini API) — processing of text prompts, solely to generate the requested thumbnails;
  • Polar — our payment processor and merchant of record for paid subscriptions; handles your payment details and billing information directly, and shares your subscription status with us;
  • Resend — delivery of transactional emails (such as renewal reminders and replies to the contact form);
  • PostHog — product usage analytics. Anonymous visit counting without cookies applies to every visitor; cookie-based analytics and session recordings apply only if you accept through the cookie banner (see section 9);
  • Sentry — error monitoring. When something breaks, it receives the error, the page it happened on, and technical details such as browser and device type, so the fault can be found and fixed. This runs without the analytics consent because it is needed to keep the Service working, and it is not used to track how you use the product.

These providers may host data outside of your home country; where applicable, such transfers rely on the safeguards set out in their respective contractual terms (standard contractual clauses or equivalent).

6. Retention period

Your account data, generated thumbnails, and history are kept for as long as your account is active. They are deleted within a reasonable period after your account is deleted, either from your account settings or by written request to contact@thumbnailmaker.so.

7. Your rights

Depending on where you live, applicable data protection law — such as the GDPR or UK GDPR in Europe and the UK, state privacy laws in the US, Canada's PIPEDA, or Australia's Privacy Act — may give you rights of access, rectification, erasure, restriction, portability, and objection over your personal data. You can exercise these rights by contacting us at contact@thumbnailmaker.so or by deleting your account directly from your settings. You may also have the right to lodge a complaint with your local data protection authority.

8. Security

Your data is protected by our hosting providers' security mechanisms, including password encryption and strict access rules ensuring that each user can only access their own data (thumbnails, history, credits).

9. Cookies

ThumbnailMaker uses cookies strictly necessary for the Service to function (keeping you signed in), which do not require consent. It also uses PostHog analytics cookies to understand how the Service is used, but only after you accept them through the cookie banner shown on your first visit — you can decline, and no analytics cookie is set until you accept. No advertising or third-party tracking cookies are used.

Whether or not you accept, visits are counted anonymously without cookies. Nothing is stored on your device for this. PostHog combines your IP address and browser details into an anonymous identifier on its own servers and does not keep the address itself; we see which pages were visited and which buttons were used, but cannot follow you from one visit to the next the way cookies would. We do this on the basis of our legitimate interest in knowing whether the Service works and which parts are used.

If you accept, PostHog may also record your session: how you move through the pages, where you click and scroll, and what appears on screen, so we can see where the product is confusing or broken. Anything you type into a form field is masked before it leaves your browser and is never recorded. If you decline, no session is recorded. You can change your choice at any time by clearing this site's data in your browser, which brings the banner back.

10. Changes to this policy

This privacy policy may be updated. The last-updated date appears at the top of this page.

11. Contact

For any question about your personal data: contact@thumbnailmaker.so