What we keep, and who can see it.
Last updated 23 September 2026.
Without an account
Reading the site stores nothing about you on our servers. Tutorial progress, preferences and any runs you try signed out live only in your browser's local storage. If you join the newsletter, we keep your email address and where you signed up from.
With an account
We store your email address and password hash (through Supabase Auth), your profile (name, handle, bio, location, links, avatar), your credit balance and every credit movement, your runs (the model, the prompt and parameters you sent, the cost, and the files that came back), your editor projects, and any MCP connectors you add, including a bearer token if you gave one.
Who sees it
Your runs, projects, connectors, credits and email are visible only to you; the database enforces this per row. Your public profile (name, handle, bio, location, links, avatar and member-since date) is visible to anyone at your profile address. Site editors can see draft content, not your account data.
Where it goes
To generate, the prompt, parameters and any reference files you attach are sent to the model provider (AtlasCloud, which routes to the model vendor) under our account, not yours. Reference files you upload are kept in a private storage folder of your own and shared with the provider through a link that expires within a day. If you add an MCP connector, the handshake and any token you gave are sent only to the server you named.
Google sign-in and YouTube
If you sign in with Google, we receive your email address, name and avatar from Google and nothing else. If you connect a YouTube channel, NextGenFilmmaker uses the YouTube API Services to upload the videos you choose to publish and to read the channel's name and picture so you can tell your channels apart. We store the channel name, its picture and an encrypted token that lets this site upload to it; we never read your videos, comments, subscribers or analytics, and we never post without you pressing Publish. Disconnecting a channel in Settings → YouTube channels deletes the token; you can also revoke access at any time from the Google security settings page. By connecting a channel you also agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy. Google user data is never sold, used for advertising, or shared with anyone but the model providers named above, and only for the feature you used.
Deleting
Deleting a run in History or a film in the Library removes its files at once. Files from runs expire on their own after 90 days and films after a year unless marked Keep; the billing page shows what you hold. Settings → Danger zone deletes your account and everything above with it. Newsletter emails carry an unsubscribe link.
Cookies
One cookie keeps you signed in. There is no advertising or third-party analytics on the site. The cookie page lists it.
Contact
To ask for a copy of your data, or anything else about this policy, use the contact page.