Privacy
Updated October 21, 2026. This notice applies to the independent JST-2 Studio at jst-2.com, not to Viggle’s own services.
Account and sign-in information
When you use Google or GitHub, we receive your provider account identifier, name, email address, email-verification information and profile image when supplied. We use these to create and authenticate your account. We do not ask for your Google or GitHub password, access to your email messages, Drive files or private repositories.
Authentication records, provider tokens and session records are stored server-side in PostgreSQL hosted by Neon. Essential HTTP-only cookies maintain your session. Authentication may record IP addresses and user-agent information for session management and rate limiting.
Prompts, results and credits
We store prompts, task status, generated-result links and credit transactions to provide your workspace and account history. Scene prompts are sent to Viggle’s API for processing. Do not include confidential information or personal data you are not authorized to share. Provider-hosted results are subject to Viggle’s retention rules; scene tasks are generally readable for about 72 hours. Our account and task records are not automatically deleted when provider download links expire.
Payments and service providers
When payments are enabled, Waffo handles checkout. We send your account identifier, email and order details so payment can be assigned to your account. We store order and credit-transaction records, not payment-card details. Hosting and requests are handled by Vercel; database records by Neon; generation by Viggle; and payments by Waffo. These providers may process information in countries other than your own.
Use and retention
We use account data to provide sign-in, generation, accounting, fraud prevention and support. We do not sell Google or GitHub account data or use it for advertising. This application does not currently add advertising cookies or a marketing analytics tracker. Operational hosting logs may still record requests. Account, task and financial records are retained to operate the service and resolve disputes; financial records may need to remain for applicable legal obligations.
Your choices and contact
You can sign out at any time and revoke access through your Google or GitHub account settings. Revoking provider access does not itself delete records already stored by JST-2 Studio. To request access, correction or deletion, contact the site operator at liziyu1209@gmail.com. Identity verification may be required before acting on a request.