Privacy Policy

Introduction

Nano Banana 2.1 is responsible for the personal information processed through the services available at nano-banana-2-1.com. This Privacy Policy explains how Nano Banana 2.1 collects, uses, and protects that information.

Information We Collect

We may collect the following types of information:

Personal Information: Name, email address, and contact details you provide when registering or contacting us.
Usage Data: Information about how you interact with our website, including pages visited and time spent.
Device Information: Details about the device you use to access our services, such as IP address, browser type, and operating system.

How We Use Your Information

We use your information for the following purposes:

To provide and maintain our services
To notify you about changes to our services
To provide customer support
To gather analysis or valuable information to improve our services
To monitor the usage of our services
To detect, prevent, and address technical issues

Guest trials and new-user free-credit grants are currently disabled. The following sections describe data handling if these features are enabled in the future.

Anonymous Free Access

If you create or edit an image without registering, we create a temporary anonymous account to deliver the result and prevent abuse. Your uploaded photos, prompts, edited images, and generated images are private by default and are not automatically published to a public gallery. We process your request and a keyed hash derived from your IP address. After a guest image succeeds, we store a necessary signed marker in the browser for up to one year to prevent that browser from repeatedly claiming the guest trial. The marker contains no prompt, image, or IP address. Unless you link the anonymous content to a registered account within 72 hours, the temporary account and generated content are removed. Network-abuse hashes are retained for up to 30 days and cannot by themselves recover your IP address.

Free-Access Anti-Abuse Markers

After a guest or free-credit generation succeeds, a signed browser marker helps prevent repeated guest trials and is retained for up to one year. When an account is deleted after receiving free credits or becoming ineligible through payment or credit redemption, we retain a server-keyed digest of its normalized email for one year from deletion, then remove it. This record contains neither the plain-text email nor the account ID. It is used only to check free-grant eligibility on re-registration, not for marketing, channel attribution or restoring work. This anti-abuse marker does not identify the same person across every device or email address.

Data Security

We implement appropriate security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction.

Third-Party Services

We use service providers only for the functions described below:

Infrastructure and storage: Cloudflare processes network, security, database, workflow, and private-file storage data.
Image generation: Replicate processes prompts, reference images, model settings, and generated results for Google Nano Banana 2.1. Other models are unavailable unless their provider is configured.
Content safety: SeeAPI Text NSFW Filter scans prompts before generation, alongside model-provider safety controls. Generation is unavailable when the required prompt safety service is not configured.
Payments: Stripe processes payments when checkout is enabled. It processes checkout identity, billing details, payment status, tax information, refunds, and subscription events. Nano Banana 2.1 does not receive full payment-card details.
Authentication and email: Better Auth and, when selected, Google process sign-in data. Cloudflare Email and Resend may process support or transactional email.
Analytics: Google Analytics and Microsoft Clarity help us understand traffic and product usage, including Clarity session recordings and heatmaps. Visitors in the EEA or UK choose whether to allow analytics before these tools load. We also ask when the region is unknown. Elsewhere analytics is enabled by default without a choice prompt. You can disable it at any time using the Cookie settings button below.

Essential cookies for sign-in, security and free-access abuse prevention are not affected by your analytics choice. The first-party nano_banana_2_1_analytics_consent_v1 cookie stores only acceptance or rejection for 90 days. Withdrawing reloads the page to stop already-loaded analytics scripts and clears Google Analytics and Clarity cookies accessible to this site. It cannot recall data already sent or delete cookies on third-party domains. You can also clear cookies in your browser or contact us below to exercise your data rights.

Channel Sources

When analytics is permitted under the choices above, first-party cookies nano_banana_2_1_attribution_first_v1 and nano_banana_2_1_attribution_v1 record the first and most recent valid external sources, each for up to 90 days. Records may include channel, campaign and creative labels (UTM, channel, ref), plus gclid/fbclid click identifiers already present in the link. Without campaign parameters, we extract only the external referring site's domain, not its full URL or search contents. We do not infer cross-device identity using IP addresses or device fingerprints, or automatically send these identifiers back to advertising platforms. Withdrawing analytics clears both cookies.

Data Retention

After a source is successfully linked to a verified account, we clear the transferred browser source cookies to avoid reusing them for another account on the same browser. The linked account sources remain as described below. Source timestamps use server time rather than your device clock.

When analytics is permitted, verified sign-in links available sources to your account. The first source is retained for channel analysis, while new valid external sources may update the most recent source. Creating a checkout freezes that checkout's sources; later visits cannot rewrite them. A last source older than 90 days is not used to attribute new checkouts, and missing historical sources remain unknown. Account and checkout records do not store gclid/fbclid. Withdrawal stops subsequent collection and linking but does not automatically erase existing account or checkout sources. You can request deletion through account deletion or the contact details below.

Anonymous-account retention is described above. Registered-account, private-file, prompt, and generation-history data are retained while needed to provide the account and until deletion through available account or file controls, subject to backups, security needs, disputes, and legal obligations. Payment, tax, refund, and fraud-prevention records are retained for the period required by applicable law and our payment processor. Support messages are retained while needed to resolve the request and protect against abuse.

Your Choices and Rights

You may update or delete available account and file data through the service. You can close your account from Security Settings. Depending on your location, you may also have rights to request access, correction, deletion, restriction, portability, or objection. Send a request to support@nano-banana-2-1.com. We may need to verify your identity and may retain information that law requires us to keep. We will respond within 30 calendar days, or notify you if applicable law permits and requires more time.