Last updated: 19 October 2026
This explains what Sable Designs holds about you, who else sees it, and how long it stays. It is written to be accurate rather than reassuring. Where something is kept indefinitely, it says so.
Sable Designs is operated by a registered company. Where this policy says "we", that is the operator, and the operator is the controller of this data.
Your account. Your email address, which is the only identifier we hold, and a password. Do not reuse a password you use elsewhere.
What you type. The prompt for every generation, along with the settings, the character, the seed and the dimensions. Prompts are stored against your email address and are kept indefinitely. This includes prompts that were allowed, not only ones that were refused.
What you upload. Reference images and video clips you supply, plus any dataset images you provide when building a character.
What you generate. Images and video, and a small thumbnail of each.
Job records. For every generation: when, which tool, how long it took, what it cost us, which endpoint served it, and whether an automated check flagged it.
Safety records. Every time our prompt check runs, we record the outcome and up to 2,000 characters of the prompt, against your email address, whether it was allowed or refused.
Payments. Your email is attached to every payment. We keep the order or invoice reference, the amount, the receipt number, and your credit history. For a USDT or USDC payment we also keep the transaction ID and, if you saved one, the address of the wallet you pay from; both are public on the blockchain anyway. For a card payment we keep Stripe's reference for it. We never see your card number: card payments are made on Stripe's own page.
The browser extension. If you install our extension for Chrome and other Chromium browsers, it keeps on your device only: the key Sable gave it when you pressed Connect, your account's email address, your choices in its window (characters, mode, number of versions) and a list of the sends it has already told you about. It sends us nothing until you press its button on a picture or a clip. Then it sends that file, the address of the page it came from and any words you typed for that send to your Sable account, where they are kept like any other upload and the job it starts, and it asks Sable how that job is going. To find the full size file of the post you pressed, it reads the media that page loads, and on some sites asks the site itself, in your browser and with your browser's own access to that site. That stays on your device: only the file you pressed comes to us. It never sends us your browsing history, the pages you visit, or anything you type on other sites. Disconnect, in the extension or under Account on the site, ends its key.
Support. Anything you send us in a ticket, including attachments.
Waitlist. If you asked for early access, your email address.
We do not collect your name, address or phone number, and we do not keep your date of birth or any identity document. We do not run analytics, advertising or tracking of any kind. There are two outside scripts, neither of them tracking: on the sign up page, Cloudflare Turnstile, which checks that you are a person and not a bot; and on pages that show an email address, a small Cloudflare script that hides the address from spam robots.
Plainly: today, almost nothing is deleted automatically.
Two caveats worth stating. A copy of a file can survive a delete for up to 24 hours because of how our storage handles versioning. And small thumbnails are not currently removed when the image they represent is, so a thumbnail can outlive the original.
We intend to turn on scheduled deletion of generated content. When we do, this table will say so and give the number of days.
Pictures and video are made by other companies' models. Your prompts and your reference images are sent to them.
Generation providers. A number of third-party AI companies. Which one handles a given request depends on the tool you used.
Rented GPUs on a marketplace. Voices, and the training of a character for sabledesigns.red, run on machines we rent. We do not choose or record where those machines are. When we finish with one, we release it. We have no control over what the host does with the disk afterwards.
Storage. Two object storage providers hold your files. A separate volume at a GPU host holds trained character models and datasets.
Infrastructure. A content delivery network sits in front of the site and therefore sees connection details including your IP address. We do not log IP addresses ourselves.
Our own tools. An internal database holds a record of generations, support messages and payments, including email addresses. Our in-app help assistant is powered by a third-party AI provider, and your question is sent to them.
Payments. Card payments are handled by Stripe, which receives your card details and your email address under its own privacy policy. Bitcoin payments go through our own payment server, on our own infrastructure. USDT and USDC payments go straight to our own wallet, and we read the public blockchain to match them to your order. No payment company is involved in digital currency payments.
Sign up check. Cloudflare Turnstile, on the sign up page, sees your IP address and details of your browser to tell people from bots.
Safety checks on sabledesigns.com. sabledesigns.com is safe for work, so an automated check by a third-party AI provider looks at pictures made or uploaded there.
Review of held results. When our automatic check holds a result, a picture of it is sent to a private Telegram chat, where a person reviews it. The chat shows an account number, never your email address.
Email. Outbound email is sent through a mail provider.
We have not obtained contractual data processing terms from every one of these providers. We are not in a position to promise that a provider does not retain your prompt or your image, or does not use it to improve their own models. Where a provider offers a no-retention setting we use it, and today only one of them is called with that flag set. If that matters to you, do not put anything into a prompt you would not want a third party to hold.
We do not use your prompts or your generated images to train general models.
One exception, and it is the obvious one. If you build a character, the images in that character's dataset are used to train a model for your account. That model and that dataset are stored indefinitely so the character can be regenerated or retrained.
We do not add watermarks or provenance data.
Files from some third-party models arrive with information embedded by the provider: its name, the model, a timestamp, a job reference. We remove it before the file reaches you, from pictures, video and audio alike. Images from some models also carry an invisible watermark inside the picture itself, which is part of the image, not of the file, and which we cannot remove.
One cookie. `sable_session`, set when you sign in. It contains your email address, an expiry, and a signature. It lasts 30 days, is HttpOnly, and exists only to keep you signed in. It is strictly necessary and there is no version of the site that works without it.
Our Bitcoin payment page is served from our own domain and sets its own cookies for the same purpose. The card payment page is Stripe's own, on Stripe's site, under Stripe's cookie policy.
Browser storage. Interface preferences only, held on your device and never sent to us: which panels you had open, your last used settings, and whether you acknowledged the age gate on the public page.
No analytics. No advertising. No tracking pixels.
If you are in the UK or the EU, data protection law gives you rights over your data. You can ask us to give you a copy, correct it, delete it, or stop a particular use.
You can close your account yourself, in Account, Password and security. It closes at once and is deleted for good 7 days later; until then, email us if you change your mind and we can switch it back on.
There is no export button. For a copy of your data, a correction, or anything else, email [email protected]. Every request is handled by a person, by hand, so it will not be instant.
You can delete your own uploads yourself, from your library, without asking.
Some things cannot be fully erased on request. Safety records and payment records are kept because we need them to run the service responsibly and to account for money received. If you ask for deletion we will tell you exactly what was removed and what was kept, rather than claiming everything went.
Access is by email and password over HTTPS. Files are held in storage that is not publicly listable and are served through links that expire after an hour.
We are a very small operation. Treat this service accordingly: it is not the place for anything whose exposure would seriously harm you.
This service is for adults. We do not knowingly hold data about anyone under 18. If you believe we do, email us and we will delete it.
We will update this page when what we do changes, and the date at the top will move. If a change is material we will email account holders.
18+ only. All imagery is generated; no real person is depicted.
© Sable Designs