Privacy Policy

Last updated: 6 October 2026

Thumbsmith (“we”, “us”) is an AI YouTube thumbnail generator at thumbsmith.app. This page explains what we collect, what we do with it, and the controls you have. Questions: hello@thumbsmith.app.

What we collect

• Account details. When you sign in with Google we receive your name, email address, profile picture and a Google account identifier. We never see your Google password.
• Your content. The video titles and ideas you type, the prompts and thumbnails generated from them, images you upload (faces, logos, backgrounds), your saved editor projects, and your brand-kit logo.
• Billing records. Your plan, credit balance and a ledger of credit changes. Payments are handled by Stripe; your card number never reaches our servers.
• Newsletter. If you subscribe, your email address and the page you subscribed from.
• Usage analytics. Google Analytics records pages viewed and actions taken (for example “generated a thumbnail”). See “Cookies” below.
• Technical data. Standard request logs (IP address, browser, timestamps) kept by our hosting provider for security and debugging.

How we use it

• To run the service: sign you in, generate and store your thumbnails, apply your plan and credits.
• To take payment and prevent abuse (for example daily limits and fraud checks).
• To send the transactional emails you trigger (welcome email) and, if you opt in, occasional guides.
• To understand what works and improve the product, using analytics only if you accept it.

We do not sell your personal data.

Who processes it

• Cloudflare: hosting, database, file storage, email delivery, and the Workers AI models that turn your titles, prompts and reference images into thumbnails.
• Google: sign-in (Google OAuth) and Analytics.
• Stripe: payments, subscriptions and invoices.

These providers act on our behalf and may process data outside your country.

Who can see your thumbnails

Your generated images, uploads and projects are private to your account. We do not publish them or show them to other users.

Cookies and analytics

We set one essential cookie, tf_session, to keep you signed in (30 days, HttpOnly). On our public pages we also use Google Analytics, which sets cookies to measure traffic and product usage. You can block these with your browser’s cookie settings or a tracking-protection extension; the service works the same without them.

How long we keep it

We keep your data while your account exists. Billing records may be retained longer where the law requires it. When you delete your account, we delete your content, uploads, projects, credit history and subscriber entry, and delete your Stripe customer record (which cancels any active subscription). Stripe may retain invoices as required by tax law.

Your choices and rights

• Delete your account at any time from your Profile page.
• Unsubscribe from the newsletter with the link in any email, or write to us.
• Access, correct or export your data, or object to processing, by emailing hello@thumbsmith.app. If you are in the EU, UK or California you have additional statutory rights, and we will honor them.

Children

Thumbsmith is not directed to children under 13, and we do not knowingly collect their data.

Changes

If we change this policy materially we will update the date above and, for signed-in users, say so in the app or by email.