Media stays on your device.
Understand how other data flows.

1. Selected media and exports

Videos, images, extracted frames, masks, edits and .spriteproj files you open are used in your browser for extraction, removal, editing, restoration and export. The editor does not upload them to a processing server, inquiry database or external AI service. It does not use Workers AI or AI Gateway.

Work in progress stays in page memory. There is no autosave or automatic recovery after refresh or tab closure. You manage and delete your originals and downloaded PNG, ZIP, JSON and .spriteproj files on your device. Projects and restoration tools may include the original background; review files before sharing.

2. Browser storage and hosting information

Only the display language (ko/en) is stored in localStorage under vsm.language. Change it using the language controls, or remove it through your browser’s site-data settings. The app does not store advertising identifiers, accounts, media or editing history in cookies, localStorage or IndexedDB. Editing still works if storage is blocked, but language preferences may not persist.

About 66MB of model and runtime files are downloaded from the same site for browser caching and working memory. Deleting the browser cache may cause another download. This cache does not save your project.

The operating site uses Cloudflare, Inc. Workers Static Assets and D1 for existing inquiries. IP addresses, request times and URLs, browser information and other technical data may pass through Cloudflare to deliver pages and models, secure the service and handle API requests. Not uploading media does not mean that no website connection data is processed.

Cloudflare RUM, separate visitor analytics, general access-log exports and Workers log collection are currently disabled. The provider’s own operational and security processing is described in the Cloudflare Privacy Policy. The operator cannot independently set retention periods for or delete every internal provider record.

3. Advertising, cookies and your choices

Google AdSense manual advertising is connected in the existing landing-page ad space and the right sidebar of /studio. The landing page and editor load the shared Google AdSense script in the head for site verification. Visits to these pages make requests to Google servers; the editor may also request manual ads. Display depends on Google's review, available ads and browser settings. Manual ads are connected in the existing landing-page ad space and the editor sidebar. The app does not configure Auto ads or automatic ad refresh. Account-level Auto ads settings are separate. Visitor analytics and a CMP are not separately connected.

Third-party vendors, including Google, may use cookies or similar technologies to serve ads based on previous visits to this website or other websites. Google advertising cookies may enable Google and its partners to serve ads based on those visits. IP address, browser/device information, page URL and ad interactions may be used for ad delivery, security, personalization and measurement. Specific information and retention follow Google's policies and the applicable advertising/consent configuration. The app has no feature that sends selected media to advertising providers.

Manage personalized-ad settings in Google My Ad Center, or review participating advertising vendors' opt-out tools. Browser cookie/tracking controls and ad blockers may also affect ad requests and display. These external settings do not record a consent choice on this site.

Advertising in applicable regions, including the EEA, UK and Switzerland, separately requires configuration and verification of a Google-certified CMP and necessary consent, rejection and withdrawal procedures. This site's own ad-consent UI is not configured, and this notice does not replace consent. Non-personalized ads do not automatically remove cookie or consent requirements.

Hosting security may use separate cookies. See Cloudflare cookie information, Google's required privacy disclosures, Google consent management requirements, Google's use of information from partner sites, and the Google Privacy Policy.

4. Existing site inquiries and retention

New site inquiries are not accepted; use email for new questions. To retrieve, answer, correct or delete previously submitted inquiries, D1 stores the category, title, message, optional browser/OS information, receipt ID, password-key hash, creation/update/expiry times and operator reply. We do not retroactively label old inquiries as having received new consent.

Inquiries are retained for 90 days after the latest submission, correction or operator reply, unless you delete them earlier. Deletion and expiry cleanup affect the primary database. D1 recovery history may retain earlier data for up to 7 days on Free or 30 days on Paid plans. If recovery is necessary, deletion requests and expired records must be reapplied. See D1 recovery history.

Abuse prevention stores a secret-salted, IP-derived hash and request counts for 20 minutes. Operator access records retain time, action, target receipt IDs, operator IP, credential-identification tag and integrity signature for 366 days. They do not contain inquiry bodies, replies or raw password keys. The operator does not create separate manual database backups.

5. Providers and international processing

Cloudflare, Inc. is a US-based hosting/database provider. Website visits and existing-inquiry retrieval, correction, deletion and administration may transmit and process technical information and necessary inquiry data over HTTPS. Selected media and frames are not transmitted.

The existing inquiry database was created in the EU jurisdiction with read replication disabled. Database execution and storage are restricted to the EU, without specifying a particular member state. Web requests and provider operations/support may pass through the global network, so not every processing stage is described as staying in Korea or the EU. The precise country-by-country support-access scope for this service has not been confirmed. A general subprocessor list is not a list of actual inquiry-storage countries.

Purposes and periods are site delivery, security and the existing-inquiry handling described in section 4. Before reopening site submissions, applicable contracts, international-processing scope, legal grounds and necessary notices/consent will be reviewed. Existing inquiries can be deleted after authentication, and rights requests can be sent by email.

Cloudflare DPA · D1 data location · Cloudflare subprocessors

6. Email inquiries

Messages to pepe851@naver.com arrive in the operator’s Naver mailbox. The sender’s email, name or alias, message and attachments are used as necessary to respond and handle privacy requests. Rights requests are handled to meet applicable duties; general questions are handled to respond to the sender’s request. Do not send passwords, password keys, national identification numbers, original videos or unnecessary personal information.

The operator’s policy is to delete email within 30 days after handling is completed. If minimal information must be kept for a legal duty or dispute, the reason and period will be explained to the requester. Email is outside the site database’s automatic expiry; the operator manages the mailbox, trash and downloaded copies. See the Naver Privacy Policy.

7. Rights requests, contact and changes

Send access, correction, deletion, consent-withdrawal, restriction or authorized-representative requests to the privacy email. Existing site inquiries also have authenticated retrieval, correction and deletion. A receipt ID alone does not disclose an inquiry or allow password-key reissue. Only minimal necessary facts are used to verify the requester; if verification is not possible, we explain why. We do not require national identification numbers or unnecessary identity-document copies.

For independent assistance in Korea, visit the Privacy Portal. Changes to processing, providers, international handling, advertising or contact details will be reflected here before taking effect, with necessary procedures. This update clarifies the operating domain, language support and current manual-advertising integration.