Legal
Last updated: October 20, 2026. This basic policy describes what Pumpkin Head Illusion collects and how it is used while the product runs on Cloudflare Workers.
Pumpkin Head Illusion is a Halloween AI video generator (pumpkin head, costume transition, simple reveal, pet + couples). For product, privacy, or account questions, email support@pumpkinmorph.com.
Login uses an email address and a one-time verification code (OTP). We store your email and session data so you can stay signed in and unlock generation after payment. OTP codes are short-lived. When Resend is configured, codes are sent by that email provider; until then, local development may expose a test code only in non-production settings.
You upload photos to create Halloween clips. In the current demo / preview pipeline, processing is oriented around generating your requested video; we do not sell your photos. Do not upload images of people who have not consented, or illegal content. You are responsible for what you upload. Generated previews may include a watermark until your account is unlocked.
We use an HTTP-only session cookie named phi_session to keep you logged in. This is essential for authentication, not advertising. Clearing cookies signs you out.
Unlocking may use Stripe (test mode until live keys) and/or PayPal (sandbox until live credentials). Payment processors receive the data needed to complete checkout (for example card or PayPal account details handled on their side). We store payment / unlock records in our database (for example provider, status, timestamps) so we know your account is unlocked. See Stripe and PayPal privacy policies for how they process payment data.
When configured, transactional email (OTP) is sent via Resend. Resend processes the recipient address and message content needed to deliver the code.
The app is hosted on Cloudflare (Workers / related edge services) with data in Cloudflare D1. Cloudflare may process requests (IP, headers, logs) as part of delivering the service. See Cloudflare’s privacy documentation for details.
This policy describes the core product. If marketing pixels or analytics are added later, this page should be updated to name those services and their purposes.
We may update this policy as the product, providers, or legal requirements change. The “Last updated” date at the top will change when we do. Continued use after an update means you accept the revised policy.