Last updated: October 24, 2026
Who we are
Drino Shots is run by an individual, based in Vietnam. We are responsible for the personal data described here. Contact: .
What we collect
- Account: when you sign in with Google or GitHub, your name, email address, profile picture and the account ID from that provider.
- Projects: while signed out, projects stay in your browser and we don't receive them. While signed in, your projects (text, settings, and the images and screenshots you upload) are also saved to your account so you can open them on other devices.
- Usage: a record of each AI request and each export (time and counts), to apply your plan's limits.
- Payments: your plan, its status and renewal date. Card and bank details are handled by the payment provider; we never receive them.
- Preferences: your interface language and similar settings, stored in your browser.
We don't use advertising or analytics trackers, and we don't sell personal data.
Why we use it
To provide the service you asked for (signing in, saving and syncing projects, AI features, exports), to apply plan limits and billing, to prevent abuse, and to answer you when you contact us. The legal basis is performing our agreement with you, and our legitimate interest in keeping the service secure.
Who processes it
- Supabase: sign-in, database and file storage for accounts, projects and usage records.
- Google: sign-in with Google, and the Gemini API, which receives small copies of your screenshots and your caption text when you use AI captions or translation, to return the result.
- GitHub: sign-in with GitHub.
- Paddle (international payments) and our Vietnamese payment provider (bank transfers): billing.
- jsDelivr: serves the 3D emoji images when you open the emoji picker, so it sees your IP address.
These providers may process data outside your country. They handle it under their own privacy terms and data processing agreements.
Cookies and browser storage
We use cookies only to keep you signed in. Your projects, preferences and drafts are stored in your browser's storage (IndexedDB and local storage), which stays on your device.
How long we keep it
Account data and cloud projects are kept until you delete them or your account. Usage and billing records are kept as long as needed for billing and as required by tax law. Deleted projects are removed from our storage.
Your rights
You can see, correct, export and delete your data. Projects can be downloaded as a backup file and deleted from the project menu; to delete your account and everything in it, email and we'll do it within 30 days. Depending on where you live you may also object to or restrict processing, or complain to your data protection authority.
Security
Data is sent over HTTPS. Projects and images saved to your account are private to you: database rules allow only your own account to read them.
Children
The service isn't meant for children under 16, and we don't knowingly collect their data.
Changes
We'll post changes to this policy here, and tell signed-in users about significant ones.