Privacy Policy

Effective 25 July 2026 · Questera Marketing · [email protected]

The short version: Carousel Studio is a local desktop application that runs entirely on your own computer and your own AI key — all processing happens on your machine. Your projects, key, and generated content never reach us — we couldn't see them if we wanted to. The only things we handle are your purchase record (email + licence key, so you can recover it), payment via Stripe (we never see card numbers), and website analytics — cookieless and anonymous by default, plus Google Analytics only if you accept the cookie banner (section 4).

1. What the Carousel Studio app does with your data

Everything. Locally. The app stores your projects, brand settings, AI API key, and your generated carousels in your browser's local storage on your own computer — and it automatically clears generations after 48 hours. When you generate, your computer talks directly to your chosen AI provider (Google Gemini or OpenRouter) using your key, and to the news sources it researches. There is no Carousel Studio server in the middle, no account system inside the app, and no telemetry or tracking in the app. Any API key you enter stays local: it is stored only on your machine and leaves it only in the direct calls your own computer makes to your chosen AI provider — it is never sent to us.

The email address you enter to start the free trial is stored on your own computer only. It is never transmitted to us. It exists so the trial is attributable and so support emails you choose to send can identify you.

2. What we store on our side

Only what a purchase requires:

Purchase record — when you buy Carousel Studio, we keep your email address, the name Stripe gives us (if any), and the licence key we generated for you. This is what lets you recover a lost key at any time from the account page.
Sign-in events — when you sign in on this website with a one-time email code, we record that the sign-in happened (email and timestamps), to operate the account page and understand aggregate signups.
Support email — if you email us, we have what you sent. The app's built-in problem reports are automatically scrubbed before they leave your machine: content, project names, handles, emails, and keys are redacted.

That's the whole list — nothing beyond the essentials of your licence. We have no database of your content, your AI key, or your generations, and we collect no device fingerprints or hardware identifiers: licence activation is verified offline on your own machine, so activating sends us nothing at all. No telemetry, no usage analytics from the app, ever.

3. Payment

Payments are processed by Stripe. Your card details go to Stripe, not to us — we receive only confirmation of the payment and the email you used at checkout. Stripe's own privacy policy governs that data.

4. Website analytics and cookies

This website — not the app — uses two analytics tools. DataFast runs on every page: it is cookieless and aggregate, recording page views and referrers with no personally identifiable information and no cross-site tracking.

Google Analytics 4 is different, so we ask first. It sets cookies (_ga, _ga_*) in your browser, derives an approximate location from your IP address, and sends that data to Google, who process it under their own terms. It loads with Google Consent Mode set to denied, which means it stores nothing and sets no cookies unless you press Accept on the banner. Decline — or simply ignore the banner — and it stays switched off. To change your mind, clear this site's cookies and site data and the banner returns.

We do not sell your data and we do not build advertising profiles: the Google Ads personalisation signals (ad_storage, ad_user_data, ad_personalization) are set to denied and we never enable them.

5. One-time email codes

Signing in on this website sends a one-time code to your email via our email-delivery provider. The code proves you own the inbox — that's how we make sure only you can see your licence key. Codes expire and are not reused.

6. Your data on your device is yours — and your responsibility

Because everything the app does lives in your own browser and on your own disk, it is under your control — and outside ours. We cannot access, restore, or recover the app's local data, and we are not responsible for its loss. Download what you want to keep (generations clear after 48 hours), and back up your machine like you back up anything that matters.

7. Data retention & deletion

We keep purchase records for as long as your licence exists, as proof of purchase and for key recovery. To have your records deleted, email [email protected] from your purchase address — note that deleting the purchase record removes our ability to re-send a lost key (your already-activated app keeps working, since activation is offline).

8. Changes

If this policy changes, the new version will be posted here with a new effective date. Material changes to what we collect would be called out on the site.

9. Contact

Questions about privacy: [email protected].