Last updated: 2026
This explains what Sable Designs holds about you, who else sees it, and how long it stays. It is written to be accurate rather than reassuring. Where something is kept indefinitely, it says so.
Sable Designs is operated by a registered company. Where this policy says "we", that is the operator, and the operator is the controller of this data.
Your account. Your email address, which is the only identifier we hold, and a password. Do not reuse a password you use elsewhere.
What you type. The prompt for every generation, along with the settings, the character, the seed and the dimensions. Prompts are stored against your email address and are kept indefinitely. This includes prompts that were allowed, not only ones that were refused.
What you upload. Reference images and video clips you supply, plus any dataset images you provide when building a character.
What you generate. Images and video, and a small thumbnail of each.
Job records. For every generation: when, which tool, how long it took, what it cost us, which endpoint served it, and whether an automated check flagged it.
Safety records. Every time our prompt check runs, we record the outcome and up to 2,000 characters of the prompt, against your email address, whether it was allowed or refused.
Payments. Your email is attached to the payment invoice. We keep the invoice reference, the amount, the receipt number, and your credit history. We never see a card number, because we do not accept cards.
Support. Anything you send us in a ticket, including attachments.
Waitlist. If you asked for early access, your email address.
We do not collect: your name, address, phone number, date of birth, or any identity document. We do not run analytics, advertising or tracking of any kind. There is no third-party script on the site.
Plainly: today, almost nothing is deleted automatically.
Two caveats worth stating. A copy of a file can survive a delete for up to 24 hours because of how our storage handles versioning. And small thumbnails are not currently removed when the image they represent is, so a thumbnail can outlive the original.
We intend to turn on scheduled deletion of generated content. When we do, this table will say so and give the number of days.
Generation is done by other companies' models, and by GPUs we rent. Your prompts and your reference images are sent to them.
Generation providers. A number of third-party AI companies. Which one handles a given request depends on the tool you used.
Rented GPUs on a marketplace. Explicit generation runs on machines we rent. We do not choose or record where those machines are. When we finish with one, we release it. We have no control over what the host does with the disk afterwards.
Storage. Two object storage providers hold your files. A separate volume at a GPU host holds trained character models and datasets.
Infrastructure. A content delivery network sits in front of the site and therefore sees connection details including your IP address. We do not log IP addresses ourselves.
Our own tools. An internal database holds a record of generations, support messages and payments, including email addresses. Our in-app help assistant is powered by a third-party AI provider, and your question is sent to them.
Payments. Our Bitcoin payment server is self-hosted, on our own infrastructure. No payment company is involved.
Email. Outbound email is sent through a mail provider.
We have not obtained contractual data processing terms from every one of these providers. We are not in a position to promise that a provider does not retain your prompt or your image, or does not use it to improve their own models. Where a provider offers a no-retention setting we use it, and today only one of them is called with that flag set. If that matters to you, do not put anything into a prompt you would not want a third party to hold.
We do not use your prompts or your generated images to train general models.
One exception, and it is the obvious one. If you build a character, the images in that character's dataset are used to train a model for your account. That model and that dataset are stored indefinitely so the character can be regenerated or retrained.
We do not add watermarks or provenance data.
However, images produced by some third-party models arrive with information already embedded in the file, and we do not strip it. That can include the provider's name, the model, a timestamp and a job reference. Images from some models additionally carry an invisible watermark which cannot be switched off.
If you intend to publish output, and that metadata matters to you, strip it yourself before you do.
One cookie. `sable_session`, set when you sign in. It contains your email address, an expiry, and a signature. It lasts 30 days, is HttpOnly, and exists only to keep you signed in. It is strictly necessary and there is no version of the site that works without it.
Our Bitcoin payment page is served from our own domain and sets its own cookies for the same purpose.
Browser storage. Interface preferences only, held on your device and never sent to us: which panels you had open, your last used settings, and whether you acknowledged the age gate on the public page.
No analytics. No advertising. No tracking pixels. No third-party cookies.
If you are in the UK or the EU, data protection law gives you rights over your data. You can ask us to give you a copy, correct it, delete it, or stop a particular use.
Be aware of how this works in practice here. There is no self-service deletion button and no export button. Every request is handled by a person, by hand. Email [email protected] and we will do it, but it is manual and it will not be instant.
You can delete your own uploads yourself, from your library, without asking.
Some things cannot be fully erased on request. Safety records and payment records are kept because we need them to run the service responsibly and to account for money received. If you ask for deletion we will tell you exactly what was removed and what was kept, rather than claiming everything went.
Access is by email and password over HTTPS. Files are held in storage that is not publicly listable and are served through links that expire after an hour.
We are a very small operation. Treat this service accordingly: it is not the place for anything whose exposure would seriously harm you.
This service is for adults. We do not knowingly hold data about anyone under 18. If you believe we do, email us and we will delete it.
We will update this page when what we do changes, and the date at the top will move. If a change is material we will email account holders.
18+ only. All imagery is generated; no real person is depicted.
© Sable Designs