Privacy
Last updated 6 September 2026. Dupe is run by one person. This describes what the software actually does, not what a template says it might.
The short version
Dupe stores your email address, the images you upload, and the styles and pictures you make from them. It has no analytics, no advertising, no third-party scripts and no tracking cookies of any kind. Your library is private to you and is never shown on the public site. Two AI providers see the images and text you submit, because that is how the app works. You can have everything deleted by asking.
What is stored, and why
| What | Why it exists | How long |
|---|---|---|
| Your email address and display name | To know whose library is whose. It was typed in when your invite was made — Dupe never asks you for it and there is no signup form. | Until deleted |
| Images you upload | They are the reference the style is measured from. | Until deleted |
| Styles, generated images, character and location sheets, storyboards | They are your work. Dupe would be pointless without keeping them. | Until deleted |
| A running total of what your usage cost, by month and by feature | Every paid call is written down before it is made, against a monthly cap. That ledger is the only thing preventing a runaway bill. | Until deleted |
| One session record per browser you sign in from | To keep you signed in. It holds a hash of your session token, never the token. | 30 days, then deleted automatically |
| Your sign-in link | To let you in once, without a password. | 30 minutes, and it is destroyed the moment it is used |
What is not stored
- No password. Dupe has none to lose. You sign in with a one-time link.
- No request logs. The server's HTTP logging is switched off in code, and the web proxy in front of it has no access log configured. Nobody is keeping a record of the pages you opened or when.
- No stored IP addresses. Your address is held in memory for a few minutes by the rate limiter, to stop one visitor flooding the site. It is never written to disk and it is gone when the server restarts.
- No analytics, no trackers, no advertising, no third-party fonts or scripts. Every file the site loads is served by the site itself. This was checked, not assumed.
- No cookie banner, because there is only one cookie and it is the one that keeps you
signed in. It is
HttpOnly,SameSite=LaxandSecure, so a script cannot read it and another website cannot make your browser use it.
Who else sees your work
Two companies process what you submit, only at the moment you submit it:
- Anthropic receives an image you drop, in order to read its style, and receives text alone when Dupe suggests ideas for a scene.
- Google receives the text of a prompt, and any character, location or prop reference images attached to that generation — including sheets you imported from your own computer. If a picture is attached to the thing you are generating, it goes with it.
Both are sent under Dupe's own API keys. Your email address and your name are never sent to either of them, or to anyone else. Their own terms govern what they do with what they receive. The site is hosted on a server rented from DigitalOcean, in the same way any website is hosted somewhere.
That is the complete list. Nothing is sold, and there is nobody to sell it to.
Your library is private
The styles shown on the front page are a small set chosen by hand and published on purpose. Nothing you make is ever added to them. Publication is a deliberate act on a single curated library, and a style copied into your account has its publication flag removed as it is copied — so a style in your library cannot become public even by accident.
Getting your data, or getting rid of it
Ask, and either happens by hand, usually the same day:
- A copy of what is held about you — the account record, a list of your styles, how many pictures you have made, and your spend ledger.
- Deletion. Your account, every session, your spend ledger and your entire library are removed from the server. This is not a flag on a record; the files are gone. It cannot be undone, and the nightly backups it already appears in are kept for seven days before they rotate out.
Ask the person who invited you and say which you want. Dupe has no email sender, so every message here is a human one.
Security
- Sign-in links and session tokens are stored only as hashes. Someone reading the server's disk could not sign in as you with what they found.
- Account files, session files and spend ledgers are written owner-only, in a directory that is itself owner-only.
- The whole site is served over HTTPS.
- Backups contain session records, so they are stored owner-only too.
Children
Dupe is invite-only and not intended for anyone under 16. No account is created without someone being invited by name.
Changes
If this notice changes in a way that affects you, the person who invited you will tell you directly. There are few enough people here for that to be a real promise rather than a formality.