Privacy policy
Last updated: September 26, 2026
What we process
- Your description and the character created: the description you type, the generated profile and the portrait produced are stored by Muzea. They are sent to our model providers (Anthropic for text, RunPod for images) for the duration of the generation.
- A trial counter: a signed technical cookie (number of creations today) and a non-reversible fingerprint of your IP address, to enforce the free quota.
- Your journey on the site: pages viewed, where the visit came from, device type, key actions (creation started, plan viewed). These events are tied to a non-reversible fingerprint computed from your IP address and browser, renewed every day: we cannot follow you from one day to the next.
- Safety refusals: the rule triggered and the request concerned, to fix overly strict filters and detect abuse attempts.
We never store your IP address in clear text.
Why
- To provide the service and enforce quotas (performance of a contract).
- To improve Muzea: understand where the journey breaks, speed up creation by suggesting preset characters, and train or fine-tune our models using creations (legitimate interest). You can object at any time by writing to us: your creations are then excluded from this work.
- Security and compliance: prevent abuse and respond to any lawful request (legal obligation).
How long
- Journey events: 12 months, then automatic deletion.
- Creations (description, profile, portrait): kept to improve the service; their link to the visitor fingerprint is erased after 12 months, making them anonymous.
Cookies
Muzea uses no advertising cookies or third-party trackers. The only cookie set is strictly necessary for the free quota to work: it is exempt from consent. Audience measurement is done without cookies and without any persistent identifier.
Your rights
You have the rights of access, rectification, erasure, objection and portability. Write to contact@muzea.app. You can also lodge a complaint with the CNIL (the French data protection authority) or your local supervisory authority.
Processors
Anthropic (text generation), RunPod (image generation), Vercel (website hosting), Neon (log database), Cloudflare R2 (portrait storage). Transfers outside the EU are covered by the European Commission's standard contractual clauses.