Privacy

Your account

Google sign-in provides your name, verified email address and an account identifier. We use these to sign you in, keep your account separate from other accounts and grant your signup credits once.

Cloudflare hosts the service and stores your account, projects, settings, credit balance, generation progress and payment records.

Your content

We store your post text, motion descriptions, project settings and uploaded images so you can continue editing. Uploaded images, generated motion and completed MP4 files are stored in private Cloudflare R2 storage. Access requires account authorization.

For custom AI motion, Google’s Gemini API receives your motion description with composition instructions. We do not include your uploaded images, avatar, post text or sign-in profile in that generation request. Anything you type into the motion description is included.

Built-in procedural effects run without an AI generation request. Your browser combines the motion and post into the final MP4, then uploads the export to your private account storage.

When you ask the text assistant to improve a motion prompt, suggest a caption or draft a chat, the relevant text you provide is sent to Google’s Gemini API. Applying a suggestion is a separate action and does not start video generation. Assistance results may be cached in your account to avoid repeating the same request.

Your saved Brand profile contains the name, handle, avatar and default settings you choose. It is stored with your account so you can apply it to projects on another device. Applying it does not publish your content.

Payments

Stripe hosts checkout and processes payment details. We send purchase and account identifiers to Stripe. We store transaction identifiers, amounts and payment status to apply credits and handle payment updates. Card details are entered on Stripe’s checkout.

Email notifications

When email delivery is available and you choose to be notified, Resend receives your email address and a notification with a link to your clip. These notifications tell you when motion or an MP4 is ready.

Cookies and browser storage

Essential cookies keep you signed in and protect the Google sign-in flow. Browser storage may keep a local recovery copy of editing state and the design you choose before signing in. Local recovery is separate from the projects saved to your account.

The installable app caches public application files and selected public sample media. Private uploads, project API responses and authentication routes are excluded from that public app cache.

Signing out ends your session. Clearing browser storage removes local app data, but does not delete your stored account, projects or media.

Website visits

To understand how visitors find HookPapa, we send entry notifications to a private operator Telegram group. These include the IP address provided by Cloudflare, the entry page, the referring site when available and campaign or other non-sensitive link parameters. Authentication credentials and private text fields are excluded. A cookie lasting 30 minutes prevents repeated notifications while you move through the site.

Optional analytics and advertising measurement

If you accept analytics, Google Analytics measures page views, successful registration, your first completed video and confirmed credit purchases. Purchase events include a transaction identifier, the credit package, amount and currency. We do not send your email, phone number, prompts, project content or uploaded media to Google Analytics.

If you accept advertising too, Meta measures page views, successful registration, checkout starts and confirmed credit purchases, and may use these events to personalize ads. Purchases include a stable order identifier, the actual amount and currency. We do not send your email, phone number, prompts, project content or uploaded media to Meta. Test payments are excluded from production purchase reporting.

With your consent, we save campaign labels and advertising click identifiers in a first-party cookie for up to 90 days, and attach the source to account events so it survives Google sign-in and Stripe checkout. Google uses analytics cookies to connect visits. Meta browser and click identifiers are stored only with advertising consent. Advertising click identifiers are not sent to Google under the analytics-only choice.

Optional measurement stays off until you accept. Choose “Analytics only” to keep Meta off, or reject both without affecting the service. You can change your choices or withdraw consent for future collection here.

Retention and removal

Account records, projects and media remain stored for continued use. There is no automatic deletion schedule or self-service account deletion. To request removal, email support@hookpapa.com from the email associated with your account, or message us on Telegram.

Contact and support

For a purchase, an unavailable result, or a request to remove your account and content, email support@hookpapa.com or message us on Telegram.