OUTSTANDINGSET / Updated October 27, 2026
Privacy notice
OutstandingSet is an independent photo-to-performance service. This notice explains how photos and private orders are handled. The workbench shows current generation and payment availability.
Local preview
Selecting a photo first creates a preview in this browser tab. It is not uploaded just because you choose it. Replacing or removing it releases the old preview; closing the tab ends the local preview session. The file checks do not verify identity, age or permission.
When you continue
When generation and checkout are available, continuing uploads your authorized photo to our service and creates a private order. The generation workflow sends the photo to the Fal model service. Provider processing and retention are governed by the provider’s own terms and privacy practices; deletion from our service does not prove deletion from that provider.
Storage and removal
Uploads without a purchase are scheduled for removal after 24 hours. Source photos linked to completed or failed orders are scheduled for removal 24 hours after the order reaches that state. Photos for orders still processing or awaiting review may be retained until the matter is resolved. Generated outputs are scheduled for removal after seven days; a download link may then expire.
These periods depend on the service’s cleanup process running. We do not claim immediate deletion from all systems, provider deletion, or that unresolved orders are removed on the same schedule.
Private order access
A private recovery token grants access to an order. It is kept in the URL fragment and, where the browser permits, session storage for this tab’s browsing session. An HTTP-only ownership cookie is used for upload and checkout continuity. Keep the full recovery link private. We exclude order pages from search and do not publish uploaded photos or generated videos as public examples.
Payments and operational records
When enabled, Stripe handles checkout. We do not receive or store your full card number. Order records hold the payment reference, amount, confirmed payment events and fulfillment status needed to prevent duplicate fulfillment and resolve problems. Technical logs may record request metadata and errors. Recovery tokens should not be entered into search engines or sent as public analytics data.
Basic first-party measurement
On the homepage, we keep a random session identifier in this browser’s session storage and record a visit and the first photo-selection attempt. Only that identifier, the event name and a source category—Google, ChatGPT, TikTok, direct, other or unknown—are sent to this service. The event payload does not include the original address, query parameters, referring-page path, photo or private recovery token. Checkout can attach the same source signal to its order.
These are raw browser events: they can include internal tests, bots or missing and inaccurate source signals. They are not verified counts of real customers. Event records are deduplicated and scheduled for deletion after 30 days; an order keeps its initial source signal for operational attribution. We do not use a third-party tracking script, cross-site identifier or analytics cookie for these events. Operational request metadata may still appear in server logs.
Your choices
We do not collect a mailing list. If you do not want to upload, you can leave after the local preview. Do not provide children’s photos, sensitive documents or photos you lack permission to use.
Private information
Use your private order page to check an existing order. Do not post photos or recovery links publicly, or send them to an unverified account. Uploads and payments are paused while generation is unavailable.