Privacy policy (test draft)
Version：2026-10-19
Test draft: the operator identity, contact channel, retention periods and other details still require confirmation. This page describes current processing and does not replace a complete privacy policy for a formal release.
This notice covers the Ora Studio website, account pages and browser modeling workspace. We have not integrated personalized advertising. Optional usage statistics are not a condition of signing in or modeling.
1. Data we process
- Accounts: email address, display name, account identifier, permissions, sign-in and connection records. Passwords are stored as salted hashes; verification codes support registration and password recovery.
- Models and collaboration: models, attachments and collaboration records you save, upload or share, according to the storage method and access permissions you use. Local-only files and cloud saves use different storage.
- Optional usage statistics: only after you allow them, random visitor and session identifiers, page paths without URL queries or fragments, entry device type, visit counts, times and online heartbeats. This endpoint does not submit email addresses, passwords, models or conversations and does not deliberately link records to your account. Random identifiers do not mean fully anonymous data in a legal sense.
- Service records: account sign-in, permissions and collaboration still require server processing. Account last-sign-in, connection status and online-duration records are separate from optional visitor statistics and are not deleted by this choice.
2. Cookies and local storage
| Purpose | Storage and duration |
|---|---|
| Sign-in | Server-set ora_session cookie. The default session duration is 7 days, subject to actual server configuration; cleared on sign-out. |
| Manual language preference | ora_site_language cookie, up to 1 year. |
| Privacy choice | Local storage, valid for 180 days, then requested again. If browser storage is blocked, the choice applies to the current page only. |
| Optional visitor statistics | Visitor and tab-session identifiers are stored only after permission. Withdrawal clears them; the session identifier ends with the tab. After permission expires, the visitor identifier is cleared on your next visit or when expiry is detected. |
| Local models and settings | Browser databases or local storage until you delete them or clear site data. Clearing site data may delete local models without backups: export them first. |
3. Choosing and withdrawing
Choose Necessary only or Allow usage statistics on your first homepage visit. The homepage prompt and button disappear after your choice. Other pages show neither a floating privacy settings button nor an automatic prompt. Optional visitor statistics do not start before a choice. Use Settings → Privacy settings in the editor to change it at any time. Withdrawal stops future reports and timers and clears browser statistics identifiers. Sign-in, modeling and saved models remain available.
Your choice applies to pages on the same website origin in the same browser. Private windows, other browsers, devices or domains may require another choice.
4. Retention, sharing and service providers
During this test stage, detailed visitor statistics do not yet have an automatic deletion period. Withdrawal does not automatically delete previously stored server statistics, accounts or cloud models. Clear server retention periods, deletion-request procedures and backup rules remain to be completed for the final policy.
Account emails are delivered through the configured Alibaba Cloud DirectMail service, which processes the recipient address and verification email content. Cloud saving, sharing and collaboration send related data to the servers providing those features and make it available according to your access permissions.
If you use AI features, messages, attachments and model context selected to complete your request may be processed by the configured model service provider. This is separate from optional visitor statistics. Provider identities, data destinations and applicable rules still require complete disclosure before the corresponding services are formally offered.
5. Your rights and contact
You can change your statistics choice, sign out, and manage or export models using available features. Requests to access, correct or delete account or cloud data, or close an account, currently require manual processing; this page does not provide automated account deletion.
A public operator name and privacy email are not yet available. This page cannot currently receive deletion or other privacy requests. These details and a working request channel must be added before formal release.
6. Changes
Material changes to purposes or processing require an updated notice and a new choice where necessary. Accepting required service terms does not grant permission for optional visitor statistics.