Data & privacy

This page describes the current invitation trial. Updated September 10, 2026.

Website usage counts

Our first-party counters keep daily totals of page views, button clicks and saved applications by page, language and entry category for 90 days. These counters set no analytics cookies and store no visitor IDs, full referrer URLs or search terms. View and click events are not sent when Do Not Track or Global Privacy Control is enabled. Saved-application counts are server operation records. Totals are not unique visitor counts.

We also aggregate good, needs-improvement and poor grades for loading, responsiveness and visual stability by page and screen size for 90 days. We do not send performance details, page content or visitor identifiers, and respect the browser privacy preferences above.

Google Analytics

With your permission, public website pages load Google Analytics (GA4), which uses analytics cookies to measure traffic sources and page usage. Google processes this data. Ad personalization is disabled. Analytics does not load in the admin area or product workspace, and we do not intentionally send email addresses, application content, invitation codes, product images or full URL query strings. You can reject analytics or withdraw permission using Analytics preferences in the footer. Do Not Track and Global Privacy Control prevent loading. Your choice is saved locally for 180 days. GA cookies are configured for a 180-day lifetime and may renew on visits. Google data retention follows the property settings.

Channels and trial progress

To evaluate campaigns, we store a normalized channel and campaign label for the current browser session, not the full referring URL. Applications may link this information to the invited workspace’s first login, upload, generation and download request for 30 days. A download request does not prove a file was saved to your device. Invitations normally last 30 days and may be revoked by the maintainer.

Trial application data

The application form collects your email and requirements for manual review and replies. Records expire after 30 days and are periodically deleted. A hashed network address is used for rate limiting. A receipt does not mean an email was sent or approval was granted. To withdraw an application, request deletion or correct information, contact support@packscena.com with your receipt ID. Applications are not automatically used in public examples or marketing subscriptions.

What we process

Product originals, background references, descriptions, AI plans, outputs, job status and feedback you submit are stored in the operator's infrastructure. Each invitation code has a separate workspace. A necessary HttpOnly session cookie restores access.

When data is sent to a model provider

When you request analysis, generation or a revision, relevant images and descriptions are sent to the operator's configured AI service, which calls vision and image models. Contact support to confirm the current provider and its data policy before uploading commercially sensitive material. Do not upload sensitive data before that review.

Retention and deletion

Workspace images and related data are kept for 7 days. Expired data becomes inaccessible and is cleaned up by a scheduled job. Clearing the workspace removes originals, outputs and related jobs, but does not reset the trial allowance. Invitation mappings and usage records without image content are retained until the operator disables and removes the invitation. Keep your own downloaded backup.

Public examples and contact

Your uploads are not automatically published as examples. Current examples use the operator's own sample images. For data questions or deletion assistance, contact support@packscena.com.

Operator, service providers and planned billing

PackScena is operated by an independent individual developer based in China. Contact us for access, correction or deletion requests: support@packscena.com

Cloudflare provides hosting and storage; Google mail services deliver service messages. If you consent to analytics, Google Analytics processes the public-site analytics described above. Images and instructions needed for analysis or generation are sent to our configured third-party AI API service. Its retention and training practices have not been independently verified by us; we do not promise that all providers retain nothing or never use data for training. Ask support for current provider information before uploading sensitive material.

Paid billing is not active yet. When it opens, Paddle is intended to handle payment details as Merchant of Record. We will receive identifiers and status needed to deliver and reconcile purchases, including customer/subscription/transaction IDs, purchase email, plan, amounts and refund status. Our own forms do not collect full card numbers. Payment data is not used as input to image models.

Billing records are separate from the seven-day image retention rule. Before paid sales open, we will publish the applicable billing-record retention period based on recordkeeping and dispute requirements. No paid order records are collected by the currently unavailable checkout. Providers may process data outside your country; their own policies govern their processing.

Paddle Privacy Policy · Cloudflare Privacy Policy · Google Privacy Policy