The Traditional Chinese version of this policy governs; this English version is a translation.
Last updated: 4 October 2026
This policy explains which data TWno1 (https://twno1.ai, “TWno1”) collects when the user uses the website and the AI creation service, how that data is used, and what rights the user has.
1. Data collected
- Account data: email, display name, password (stored only as a salted hash), date of birth or the confirmation that the user is 18 or over.
- When the user signs in with a Google account: TWno1 receives only the email address, name and profile picture URL from Google (the openid, email and profile scopes of OpenID Connect). It does not receive the user's Google password and does not access Gmail, Google Drive or other Google data.
- Transaction data: credit top-up orders and credit records. Payments are processed by a third-party payment provider (Stripe); TWno1 does not store full card numbers.
- Creative content: scripts, prompts and uploaded material entered by the user, and the images and videos generated.
- Usage records: sign-in times, IP address, browser type and error logs, used for security and troubleshooting.
- Terms consent records: the time the user accepted the Terms of service, the version, the page context and the language. Under Articles 18 and 19 of the Consumer Protection Act, TWno1 must be able to prove that prior notice and consent were given, so these records are kept with the transaction records and cannot be changed once created.
2. How the data is used
- Providing and maintaining the service: sign-in, generation of content, keeping the user's works, and deducting and returning credits.
- Security and compliance: preventing misuse, fraud and unlawful content (for example, content involving minors or real people used without consent).
- Sending necessary notices: email verification, password resets, order and account notices.
- Improving service quality. TWno1 does not sell personal data.
3. Sharing with third parties
TWno1 shares only the data needed to provide the service with the following providers: cloud hosting, the email delivery service (Resend), the payment provider (Stripe), Google sign-in, and website analytics (Google Analytics, see Section 7). Where the law requires, TWno1 cooperates with the competent authorities.
4. Retention and deletion
TWno1 keeps the user's data for as long as the account exists. The user may ask for the account to be deleted at any time; after deletion, TWno1 deletes or anonymizes the user's personal data and works within a reasonable period, except for transaction records and terms consent records that the law requires to be kept.
5. The user's rights
The user may access, correct, download or delete personal data, and may withdraw the Google sign-in authorization (Google Account → Security → Third-party access). Requests go to cs@twno1.ai, or to Telegram @dc579579.
6. Age limit
The service is for adults aged 18 and over only. TWno1 does not knowingly collect data from minors; if a minor is found, the account is deleted immediately.
7. Cookies
Essential cookies: keep the user signed in and provide security protection. Without them, sign-in does not work.
Analytics cookies: the site uses Google Analytics 4 to count visits and usage, in order to improve the service. It writes two cookies in the browser, _ga and _ga_<id>, which tell visitors apart and measure time on site and return visits. They are kept for about 2 years. They carry no name or email, and TWno1 does not use them for advertising or personalized recommendations.
Opting out of statistics: the user can block third-party cookies in the browser settings, or install the Google Analytics opt-out browser add-on provided by Google. Turning off analytics cookies does not affect any feature of the service.
8. Changes to this policy
If this policy changes materially, TWno1 announces the change on the website.