Privacy Policy

1. Who we are

flux-3.run is an independent workflow preview for FLUX 3 image and video creation. It is not affiliated with, endorsed by, or operated by Black Forest Labs. For privacy questions or requests, email [email protected].

2. Information we process

Google Sign-In information

If you choose to sign in with Google, Google provides a unique account identifier, your verified email address, name, and profile picture. We use this information only to authenticate you and display your signed-in state.

Essential session information

We use secure, HTTP-only cookies for OAuth security and sign-in sessions. The OAuth state cookie normally expires within 10 minutes. The signed session cookie normally expires within 7 days and contains a signed version of your Google account identifier, email, name, profile image URL, and expiration time.

Prompts, references, and demo controls

The current playground is a browser-based demonstration. Prompts and files selected through the reference controls are not sent by this site to a live AI generation provider or stored in a user database. If that changes, we will update this policy before the new processing begins.

Early-access email field

The current early-access form only changes the interface in your browser. Email addresses entered there are not transmitted to or stored by us at this time.

Technical data

When you visit the site, hosting and security providers may process standard technical data such as IP address, browser type, request headers, timestamps, requested URLs, and security signals needed to deliver and protect the service.

Messages you send

If you contact us, we receive your email address and the information included in your message. We use it to respond, provide support, and maintain an appropriate record of the request.

3. How we use information

• Authenticate users and maintain secure sessions.
• Operate, secure, troubleshoot, and improve the site.
• Respond to support, privacy, and legal requests.
• Prevent abuse, fraud, and security incidents.
• Comply with applicable legal obligations.

4. Cookies

We currently use essential cookies for Google OAuth state validation and signed-in sessions. These cookies are required for the sign-in feature and are not used for advertising. We do not currently use advertising or behavioral-tracking cookies.

5. Service providers and external services

• Google: provides OAuth authentication when you choose Google Sign-In. Google processes information under its own privacy terms.
• Cloudflare: provides hosting, content delivery, DNS, and security services and may process technical request data.
• Sanity CDN and source publishers: deliver certain clearly labeled media used in the preview.

Links to external websites are governed by those websites' own privacy policies.

6. Data retention and security

We do not currently maintain a separate user-profile database. Authentication data is kept in the signed session cookie for up to 7 days unless you log out sooner. Support messages are retained only as long as reasonably needed to address the request, protect the service, or meet legal obligations. Service providers may retain technical logs according to their own policies.

We use reasonable technical safeguards, but no online system can guarantee absolute security.

7. International processing

Our providers may process information in countries other than your own. Where required, they are responsible for using appropriate safeguards for international transfers.

8. Your privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection to certain processing. You may also withdraw consent where consent is the legal basis. To submit a request, email [email protected]. We may need to verify your identity before completing a request.

You can end the local signed-in session at any time by selecting “Log out.” You may also manage access granted to this service through your Google Account settings.

9. Children's privacy

The site is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided personal information, contact us so we can review and delete it where appropriate.

10. Changes to this policy

We may update this policy when features, providers, or legal requirements change. The “Last updated” date shows when the latest version took effect. Material changes will be presented through an appropriate notice on the site.

11. Contact

Email privacy and support requests to [email protected].