ImaginaryPlacesAI Logo

ImaginaryPlacesAI

Hamburg Logo

Privacy Policy

Last updated: 2026-04-25

This policy explains how ImaginaryPlacesAI handles your personal data when you use the application. We process data only as far as necessary to provide the service and in accordance with the EU General Data Protection Regulation (GDPR).

Data controller

The entity responsible for processing personal data on this site is the provider listed in the imprint.

Paul Linnow
Kastanienallee 35, 20359 Hamburg, Germany
paul@stadtpuzzeln.de

What data we process

Depending on how you use the service, we process the following data:

  • Workshop access tokens — used to authenticate you and link uploads to a workshop. Tokens are stored as a hash in our database.
  • Photos you upload — stored on our servers and forwarded to AI image services to generate transformations.
  • Prompts and generated results — stored together with the chat session so you can review and continue your work.
  • Authentication cookie — a JWT token kept in your browser to keep you signed in during a session.
  • Server logs — including IP address, user agent and timestamps. Used for operations and security and rotated after a short period.

Third-party services

To deliver the AI-powered features, the application may forward your prompts and images to:

  • Black Forest Labs (BFL Flux) — image generation API.
  • Anthropic (Claude) — prompt enhancement and chat features.
  • Mistral AI — optional alternative for prompt enhancement.

Each request is sent under the API key of the operating organization. Data shared with these providers is subject to their own privacy policies.

DIPAS imports

When a place is configured with a DIPAS subdomain, public contributions are fetched from the corresponding DIPAS instance. We do not transmit any of your personal data to DIPAS.

Storage and deletion

Uploaded photos and generated results remain on our servers until you delete them or until the operating organization removes them. Gallery items you publish are publicly visible until removed.

Your rights

Under the GDPR you have the right to:

  • request information about the personal data we hold about you (Art. 15)
  • have inaccurate data corrected (Art. 16)
  • request deletion of your data (Art. 17)
  • request restriction of processing (Art. 18)
  • receive your data in a portable format (Art. 20)
  • object to processing (Art. 21)
  • lodge a complaint with a data protection supervisory authority

Contact

To exercise your rights or for any privacy-related question, contact us using the details in the imprint.