Privacy Policy

This Privacy Policy applies to https://hittheroaddude.co (the "Service"). The Service is operated by HitTheRoadDude ("we", "us"). You upload one photo of yourself, and AI puts you into the “Hit the road dude” meme video, replacing the man speaking through the pickup-truck window. Photos of faces are personal data, so this page states plainly what happens to them.

Questions or requests: help@hittheroaddude.co.

The short version

• You upload one photo of yourself. We store it and send it to a third-party AI service to make your video. We use them only to provide the Service and to enforce our Terms of Service.
• Original uploaded photos are kept for 14 days. Your finished video and its cover are kept until you ask us to delete them. Temporary files created while making a video are deleted within 14 days.
• You do not need an account. We create a guest session in your browser when you start an upload or checkout.
• Payments are handled by Stripe. We never see your full card number.
• We do not sell your personal data. We do not use your photos or videos to train AI models, and we do not use them for marketing without your permission.
• To delete photos or videos, email help@hittheroaddude.co and include the email you paid with.

What we collect

Photos you upload. One photo of yourself per video. You confirm that you have the right to use the photo and that nobody pictured is under 18.

What the AI creates. Your meme video and its cover. They are stored with your guest or registered account.

Purchase and account data.

• Purchase email: the email address you give at checkout.
• Order records: the credit pack, price, currency, payment status and Stripe reference numbers.
• Payment details: Stripe collects and processes your card or wallet details. We receive only payment metadata and never see a full card number.
• If you sign up or sign in, we store the account details you provide (such as email address, name, and a password hash, or the profile that Google or GitHub shares if you use those sign-in options).
• Credit balance and credit history, and the list of your video jobs.

Technical data.

• A session cookie that keeps your guest or signed-in session.
• Your IP address and browser user agent, stored with the session, and your IP address and browser language stored with your account record when it is created. We use them for security, abuse prevention and rate limiting.
• Campaign source details when you arrive through a link with UTM parameters or from another website: source, medium, campaign, referring host and landing page. They are stored in cookies and may be saved with your account and orders.
• A few first-party product events (for example, choosing a credit pack), recorded with your session.
• Browser storage on your device (localStorage) that remembers a video you are waiting for, so the page can resume it.

Messages. If you email us, we keep the message and our reply.

Analytics (only if enabled). See "Cookies and analytics" below.

How we use your data

• To make your video: photos go to the AI service, the results come back and are stored for you.
• To take payment, add credits to your balance, and refund credits when a generation fails.
• To show your videos in "My creations" and to link your guest history to an account.
• To keep the Service safe: rate limiting, fraud and abuse prevention, and enforcing our Terms of Service.
• To send account emails you ask for, such as a password reset, through our email provider.
• To answer support and deletion requests.
• To measure traffic and campaigns, only where analytics is enabled and your cookie choice allows it.

Where the law requires a legal basis, we rely on: performing our contract with you (making your video, taking payment); our legitimate interests (security, abuse prevention, basic service operation); your consent (optional analytics cookies, where a consent banner is shown); and legal obligations.

Who processes your data

We use these providers. Each acts for us to provide the Service and handles the data described.

• Cloudflare — hosting, the D1 database (accounts, orders, credits, job records) and R2 object storage (your photos and videos).
• Third-party AI processing providers — we send them your photo to make your video. We share it with them only to make your video; their own terms govern how they handle data on their side. Your data may be processed outside the country where you live.
• Stripe — payment processing.
• Email provider (Resend, or Cloudflare Email) — only if configured, to send account emails such as password resets and, when switched on, verification emails.
• Analytics and support tools — only if enabled; see below.
• Internal order alerts — if the operator turns them on, order details (including purchase email, country and IP address) can be sent to the operator's private messaging channel, such as Telegram, Feishu, WeCom or a webhook. They are off by default.

We do not sell personal data and do not share it for advertising. We may disclose data if the law requires it, or to protect our rights, our users or the public from abuse such as unlawful content.

AI processing of your photos

We send your photo to third-party AI processing providers to make your video. We share it with them only to make your video, and their own terms govern how they handle data on their side. Processing may take place outside the country where you live. We do not train models on your photos or videos. We do not run face recognition to identify people. We do not make or keep face templates. The AI must analyse the face in your photo to produce the result.

How long we keep data

• Original uploaded photos: 14 days after upload, then deleted.
• Temporary files created while making a video: deleted within 14 days.
• Finished video and its cover: kept until you ask us to delete them. The final video appears in "My creations".
• Order and payment records: kept as long as needed for accounting, tax, fraud prevention and dispute handling.
• Account, credit and job records: kept while the account or guest history exists, and deleted on request, except records we must keep.
• Support emails: kept as long as needed to resolve the matter.
• Cookies: see "Cookies and analytics" below.

Deleting your data

To delete photos, videos or your history, email help@hittheroaddude.co. Include the email you used to pay so we can find your guest history, and say what you want removed. We delete the files from storage and reply to confirm.

Depending on where you live, you may also have the right to access, correct, delete, restrict or object to our use of your personal data, to receive a copy of it, and to withdraw consent. Email help@hittheroaddude.co to use any of these rights. You may also complain to your local data protection authority.

Guest sessions and linking to an account

You do not need to register. When you start an upload or checkout, we create a guest session and store a cookie in your browser. Your credits, jobs, photos and videos belong to this guest session. If you clear your cookies or switch browser, you may lose access until you sign up or sign in with your purchase email.

If you later sign up or sign in, we move guest credits, jobs, photos and videos tied to the same purchase email to your registered account. We do not currently verify email addresses. Ownership is matched only by the purchase email. Anyone who registers with a purchase email can receive the history linked to it, so pay with an email address that only you control.

Cookies and analytics

• Session cookie — keeps your guest or signed-in session. It lasts until the session expires.
• Campaign cookies — remember campaign source (UTM parameters, referring host, landing page). They last up to 30 days.
• Consent cookie — remembers your cookie choice where a consent banner is shown. It lasts 180 days.
• localStorage — resumes a video you are waiting for. It stays until you clear it.

The session cookie is essential. Campaign cookies and analytics are optional.

Analytics and support widgets are off unless the operator enables them for the live site. If enabled, they can include Google Analytics, Plausible, Microsoft Clarity, Crisp or Tawk, and Google Analytics may receive a purchase event after a successful payment. When a cookie consent banner is shown, none of these load, and campaign cookies are not set, until you press Accept. If you press Reject, they stay off, and we clear campaign cookies and known analytics cookies. You can reopen your choice with the cookie settings button.

Children

You must be at least 18 years old to use the Service. Do not upload photos of anyone under 18. If we learn that a photo of a minor was uploaded, we delete it and may suspend access. If you think this has happened, email help@hittheroaddude.co.

Security

The Service is served over HTTPS. Access to our database and admin tools is limited to authorised people. No service is perfectly secure. If you find a problem, tell us at help@hittheroaddude.co.

International transfers

Our providers run worldwide infrastructure, so your data can be processed in countries other than your own.

Changes to this policy

When we change this policy, we change the date at the top. For material changes we also add a notice on the Service. Continued use after a change means you accept the updated policy.

Contact

HitTheRoadDude — help@hittheroaddude.co — https://hittheroaddude.co