Skip to main content
taotao.

PRIVACY

Privacy policy

Updated: November 12, 2026

TaoTao (taotao.media) provides text-to-image and reference-image creation tools. This policy explains how we handle information, advertising and cookies. For privacy questions, contact leeshengis@gmail.com.

Accounts and creative content

When you register, we store your email address and a one-way password hash to support sign-in, email verification and password resets. We also store daily allowances, task statuses, prompts, uploaded reference images and generated results to provide image creation and image management.

Our server processes request URLs, IP addresses and other necessary network information. We use session and CSRF-protection cookies and request limits to protect accounts, allocate credits and prevent abuse. Language-specific URLs let you choose Chinese or English; both languages use the same account and allowance.

Service providers

  • OpenAI processes your prompts and reference images to generate images. Upload only content you have permission to use and avoid unnecessary sensitive personal information.
  • Tencent Cloud provides the server and private object storage in Singapore. Images and backups are encrypted by the application before storage.
  • Resend sends verification and password-reset messages and processes recipient email addresses and message content.

These providers may process information outside your country or region. Your image records and files normally require sign-in to your own account. We do not provide a public gallery of user images. Images in the public guides were created specifically as demonstration samples.

Google advertising and cookies

TaoTao places Google AdSense units only within selected public Chinese and English guide articles viewed by signed-out visitors. Google and other advertising providers may use cookies, local storage, web beacons, IP addresses, and device or browser information to serve and measure advertising and prevent invalid traffic. Advertising cookies may support personalized ads based on previous visits to this or other websites.

See how Google uses information from partner sites and Google's privacy policy. You can manage personalization in My Ad Center or manage participating providers through industry opt-out tools.

For applicable regions, including the European Economic Area, the UK and Switzerland, Google provides a consent message with accept, reject and management options. Where available, use Privacy & cookie settings in the guide article footer to revisit your choice. Rejecting personalized advertising does not remove all advertising. Your browser also lets you clear or restrict cookies; blocking necessary cookies may affect sign-in.

Homepages, guide listings, About and privacy pages, signed-in pages, the image studio, My images, account pages and the administration area do not load advertising scripts. We do not send account emails, prompts, reference images or generated images to Google as advertising-targeting parameters.

Retention and deletion

You can delete completed images from My images. Deletion immediately removes account access, and a background process later cleans up the storage objects. The encrypted image cache is retained for up to seven days, and local database backups for seven days. Encrypted cloud backups currently have no automatic expiry; deleting an image does not immediately remove records from historical backups.

To request access, corrections or deletion of your account and related personal information, contact the email above. We first verify account ownership. Records needed for security, troubleshooting or applicable requirements may require separate handling.

Policy updates

We update this page and its date when features, providers or data handling change. Contact us using the address above with any questions.

Back to home ↗