Last updated October 24, 2026

Privacy policy

Stones to Castle uses the information below to provide accounts, photo-based video generation and downloads.

Google sign-in

When you choose Google sign-in, we receive your name, email address, profile image and Google account identifier. We use them to create your account and keep you signed in. We do not request access to Gmail, Google Drive or your contacts. Authentication records and sessions are stored in our application database.

Your photos and videos

Selecting a photo shows a preview in your browser. When you submit a task, we upload the photo to our backend, remove its embedded metadata and associate it with your account. For real generation, the processed photo and video instructions are sent to APIMart and its model provider. APIMart temporarily hosts uploaded images at an unlisted URL that its models can read; its documented upload links expire after 72 hours. For character replacement, the photo and source video are also submitted to APIMart’s material library for review. Approved reference assets are stored separately from temporary upload links; the 72-hour link expiry does not delete those library assets. Their retention follows APIMart’s policies. We do not publish your uploaded photo in the website gallery.

Task records store your input, progress, credit activity and result. Website photo and video endpoints require your account session. Download your finished video within the availability period shown beside it.

Browser storage and cookies

We use essential session cookies. To preserve your work when you leave for Google sign-in, your browser temporarily stores one photo draft. It is restored and removed on your return; drafts older than 15 minutes are discarded when the site next opens.

Providers

Google provides sign-in. APIMart and its model providers process real generation requests. Hosting providers process connection information to operate the service. Original reference videos load from MakeViral, and the creator link opens Instagram. These services process requests under their own policies.

Retention and deletion

Video downloads expire after seven days. The task worker periodically removes expired result files and photos older than seven days, except photos needed by an unfinished task. Account and credit records remain until deletion is requested or they are no longer needed to operate the account. To request deletion, email kyojing728@gmail.com from your account address.

Your choices

You can browse without signing in, sign out, or revoke access through your Google account settings. We do not sell your photos or use them to train our own models.