Local texture processing
When you use the normal, height, ambient occlusion, roughness, preview, quality-check, or export tools, your selected source image is decoded and processed by your browser. Normal Map Studio does not upload that source as part of the local workflow. Device-local preferences may remain in browser storage, but they are not treated as a server account.
Anonymous first-party events may record the page, action name, time, coarse technical context, and a random HTTP-only session identifier. Event metadata must not include image bytes, prompts, exported maps, credentials, or payment data.
Optional AI processing
An AI request is separate. After you review and accept the upload disclosure, the selected image or prompt is sent through our Cloudflare Worker to the configured FAL model endpoint. Job identifiers, capability, status, credit changes, dimensions, and non-sensitive failure codes are stored in D1. Provider result links may expire and are not permanent Normal Map Studio storage.
Do not submit material you are not authorized to process or information that requires a specialized regulated-data agreement. Provider handling is also subject to the provider's applicable terms and privacy practices.
Payments, analytics, and messages
Checkout is delegated to pay.yito.ai, which owns payment-provider credentials and payment webhook verification. Normal Map Studio stores product codes, order references, entitlement state, and credit ledger entries, not full card details.
A lightweight click.pageview script loads on every page and sends the current page URL and referrer for aggregate page-view measurement. This integration does not set an analytics cookie. Google Analytics 4 (GA4) is off by default and loads only after you choose Accept Google Analytics. GA4 may send Google the page URL and referrer, browser and device details, interaction or event data, an analytics cookie or identifier, and the request IP address, from which an approximate location may be derived. This does not mean that an IP address is necessarily stored persistently.
Google handles GA4 data under its policies. Your GA4 choice is saved in this browser. Reject keeps Google Analytics off; the Privacy choices button in the footer lets you reopen the choice or withdraw acceptance. Withdrawing removes first-party GA cookies available to the site and reloads the page with Google's provider script disabled. This analytics control does not enable advertising and is not a Google-certified consent management platform for AdSense.
If you contact us, we receive the address, content, and attachments you choose to send. Operational notifications may be delivered to our internal Feishu channels, and bounded order, error, or daily funnel reports may be delivered to our operator mailbox through ZeptoMail.
Future Google advertising
Normal Map Studio currently displays no ads, and the Google AdSense ad script is not loaded. If AdSense is enabled in the future, Google and its advertising partners may place or read cookies or use web beacons, IP addresses, or advertising identifiers to deliver, measure, limit, or personalize advertising as permitted by law.
Advertising cookies may be used to select or personalize ads based on prior visits to Normal Map Studio or other sites. The resources below explain Google's partner-site data use and provide controls for personalized advertising.
Before enabling those ads, we will provide the notices and choices required by applicable law. Where Google policy requires consent, we will use a Google-certified consent management platform and request the applicable consent before personalized or non-personalized ads are served.
- How Google uses data from partner sites — Read how Google processes information from sites and apps that use its services.
- Google Ads Settings — Review or opt out of personalized advertising in Google services.
- Third-party personalized-ad choices — Use the Digital Advertising Alliance controls for participating companies.
Retention, security, and requests
We retain order and ledger records as needed for access, reconciliation, fraud prevention, refunds, and legal obligations. Anonymous event and AI job metadata should be kept only as long as it supports product operation, security, and aggregate analysis. No internet service can guarantee absolute security, but credentials are server-only and external writes use bounded, validated interfaces.
To ask about access, correction, or deletion of identifiable data, email contact@normalmapstudio.com with enough context to locate it. We may need to verify the request before acting.