Ranch Brand Maker

Privacy Policy

Last updated: October 21, 2026

This policy explains how Ranch Brand Maker processes information when you use ranchbrandmaker.com. For privacy questions, access requests or deletion requests, contact the service operator using the privacy request form.

1. Information we process

• Design input: your description, optional reference image, file type and dimensions.
• Order and delivery records: a random order ID, an input digest, a hashed access credential, payment/session references, payment status, timestamps, generation status, model name, usage records and generated PNG files. We do not store full card numbers or card security codes.
• Browser storage: your device stores private order credentials, descriptions and order states in local storage, including up to 20 recent orders so you can return to earlier purchases. Optional reference files are stored locally in IndexedDB to support uploads and recovery.
• Support requests: the email address, topic, optional order reference and message you submit through the contact form.
• Technical information: Cloudflare processes network and request information such as IP address, browser information and request times to deliver and secure the website. Contact-form rate limiting stores a daily salted hash of the network address, rather than the address itself.

2. Purposes and legal grounds

We process design input and order information to perform the service you request, payment records to confirm purchases and address billing issues, and support messages to respond to you. We also use limited records to protect against abuse, investigate failures and meet applicable legal obligations. Where relevant, these purposes rely on performance of a contract, legitimate interests in maintaining a secure service, or legal obligations. You choose whether to submit an optional image or a support request.

3. Service providers and data sharing

• Cloudflare: hosts the website, API, private image storage, order records and contact requests. Read Cloudflare's Privacy Policy.
• CodexCN and its image-generation infrastructure: receive your description and any reference image after payment to generate the requested concepts. The configured model identifier is gpt-image-2.5-flare. Do not submit sensitive personal information, private documents or images of identifiable people. Provider processing is subject to its own practices; we do not promise that an intermediary has the same retention or training terms as a direct model-provider account.
• Waffo Pancake: handles hosted checkout and payment data. It receives the product, fixed price, random order reference and input digest; your description and reference image are not included in the checkout session. Separately, Waffo Prompt Sift receives your description before checkout for a content check. Payment and consumer support are available through Waffo's consumer portal.

We may disclose information when legally required or reasonably necessary to protect users and the service. We do not sell personal information, use it for targeted advertising, or publish customer prompts, uploads or generated results in a public gallery. We do not train our own AI models with your submissions.

4. Retention

Generated images and reference uploads are removed by the daily cleanup after the 30-day download period. The stored description is removed at the same time. Order and payment-reference records are retained for up to 365 days; content-check decision logs for up to 30 days; contact messages for up to 180 days. Daily network-address hashes used for form rate limiting are removed after two days. A daily cleanup can add up to 24 hours to these periods. Payment providers keep their own records under their policies and legal obligations.

Browser copies remain until you remove them or clear site data. You can request earlier deletion using the contact form. We may need to verify the request and retain limited information when a legal obligation or active dispute requires it.

5. Cookies and local storage

The application uses local storage and IndexedDB to keep your private order and optional reference available on your device. It does not use advertising trackers or third-party analytics. Hosting security features and the separate Waffo checkout may use their own cookies. Clearing site storage can remove your ability to retrieve a saved order automatically.

6. International processing and security

Cloudflare, the payment provider and the image provider may process data in countries other than your own. Applicable protections and rights can differ. We use HTTPS, server-side credentials, private image storage and order credentials to restrict access; no system can guarantee absolute security. We handle any legally required incident notifications under applicable law.

7. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, receive a copy of your information, or complain to a data-protection authority. Submit a privacy request through Contact, including the order reference if available. Do not send passwords, full card details or identity documents in the initial message. We may ask for proportionate verification before disclosing or deleting private order information.

8. Children and updates

The service is intended for adults aged 18 or older. We do not knowingly solicit children's personal information. Contact us if you believe a child has submitted information. We may update this policy as the service changes and will show the updated date on this page.