Privacy

In force from 13 October 2026.

What moe keeps about you, why, and for how long. It is short because little is kept.

What we keep

Your email address, to send you the link you sign in by, and the few letters the service sends: that you are over your plays, that a price or these words change. No newsletters.
Your account: its name, when it was made, its plan, and — if you pay — the names Stripe knows you and your plan by. Not your card: Stripe takes the payment and we never see it.
Your keys, in a form that lets us recognise one and not read it back.
Your projects: the scenes and the fonts, pictures and sounds you or your AI put in them, and their history, so that a change can be undone.
What your AI asked of the tools and what they answered — which tool, with what, whether it was refused and why, what a check found. We keep this to see how programs use moe and where they go wrong, and to make it better. It holds parts of your projects, as your projects do. It is read by us and given to nobody.
A line of each request to the service: its time, its path, how it ended. And, for a month, how many times each thing you published was played — a number, with nothing about who played it.
Counts of who came to what you published, month by month: for each day how often its page was opened, how often it was played and by how many people; and for the month which sites led to it, which sites play it, from which countries, and on what kind of device and browser. Counts only — see the next part for what is not kept of the people themselves.

What we do not

No advertising, no trackers, and no analytics of another company's on this site or on the pages that play your work.
Nothing that says who the people who watch what you publish are. To count them we look at a request's network address and what its browser says it is, and write neither down: the two are scrambled together with a secret made anew each day and held only in memory, so that the same person is counted once that day and cannot be known the next, by us or by anyone. No cookie is set for it. Of where a visitor came from we keep the site's name and not the page; of where they are, the country.
Nothing is sold, and nothing is used to train a model.
A film you make with the player's download button is made in your own browser. It is not sent to us.

The one cookie

When you sign in, your browser is given one cookie, which says that it is you for fourteen days or until you sign out. There are no others.

Who else handles it

Amazon Web Services runs the machine the service is on, and so holds what is listed above.
Cloudflare stands in front of it and passes requests through, and so sees addresses and what is asked for.
Resend sends our email, and so sees your address and the letter.
Stripe takes payments, and holds what you give it under its own privacy notice.

Your AI is yours: what you say to it, and what it makes of that, is between you and whoever provides it. moe sees only what it asks the tools.

What is public

What you publish can be opened by anyone who has its address, and so can a picture your AI was given an address for, for seven days. Projects you have not published are seen by you and your keys.

How long, and how to remove it

A project is kept until you delete it at your page; deleting takes down what was published from it. You can download any project whole first.
A key is revoked at your page, at once.
Pictures and films made for you are deleted after seven days.
The record of what the tools were asked is kept for as long as it is of use for improving moe.
The counts of plays and of who came are kept month by month. They hold nothing about any person, so there is nothing in them to remove.
Closing an account entirely — its address and its record with it — is not yet something your page does. It will be; until then an address to write to will be given here.

Changes

When this notice changes, the date at the top changes, and where the change matters we tell you by email.

The terms the service is offered on are in the terms of service.

隐私说明

自 2026 年 10 月 13 日起生效。

moe 保存关于你的什么、为什么、保存多久。它很短，因为保存的不多。

我们保存什么

你的邮箱地址：用来发送登录链接，以及服务发出的少数几封信——播放超额了、价格或这些文字变了。没有营销邮件。
你的账号：名称、创建时间、套餐；如果你付费，还有 Stripe 用来标识你和你的订阅的编号。不包括你的卡：付款由 Stripe 处理，我们看不到。
你的密钥：以只能辨认、不能读回的形式保存。
你的项目：场景，以及你或你的 AI 放进去的字体、图片、声音，还有它们的历史，以便撤销改动。
你的 AI 向工具问了什么、工具答了什么：哪个工具、带了什么、是否被拒绝及原因、检查发现了什么。我们保存这些，是为了了解程序怎样使用 moe、在哪里出错，从而把它做得更好。其中包含你项目的部分内容，和你的项目一样。只有我们读，不给任何人。
每个请求的一行记录：时间、路径、结果。以及一个月内你发布的每件作品被播放了多少次——只是一个数，不含是谁播放的。
你发布的作品有多少人来过的计数，按月保存：每天它的页面被打开多少次、被播放多少次、有多少人；以及当月从哪些网站来、被哪些网站嵌入播放、来自哪些国家或地区、用的是哪类设备和浏览器。只有计数——关于这些人本身不保存什么，见下一节。

我们不做什么

这个网站和播放你作品的页面上，没有广告、没有追踪器、没有第三方的统计。
不保存任何能说明观看你作品的人是谁的东西。为了数人数，我们会看请求的网络地址和浏览器的自我标识，但两样都不写下来：它们与一个每天重新生成、只放在内存里的秘密混在一起打乱，于是同一个人当天只算一次，到第二天就认不出来了——我们认不出，别人也认不出。不为此设置 Cookie。访客从哪来，只保存网站的名字，不保存具体页面；访客在哪，只保存国家或地区。
不出售任何东西，也不用来训练模型。
你用播放器的下载按钮做的视频，是在你自己的浏览器里做的，不会发给我们。

唯一的 Cookie

登录时，你的浏览器会得到一个 Cookie，表明是你，有效十四天或到你退出为止。没有别的。

还有谁经手

Amazon Web Services 运行服务所在的机器，因此保存着上面列出的东西。
Cloudflare 在它前面转发请求，因此能看到地址和请求的内容。
Resend 替我们发邮件，因此能看到你的地址和信的内容。
Stripe 处理付款，按它自己的隐私政策保存你给它的信息。

你的 AI 是你的：你对它说了什么、它据此做了什么，是你和它的提供方之间的事。moe 只看到它向工具提出的请求。

什么是公开的

你发布的作品，有地址的人都能打开；你的 AI 拿到地址的图片也是，七天内有效。没有发布的项目，只有你和你的密钥能看到。

保存多久，怎样删除

项目一直保存到你在自己的页面上删除它；删除会同时撤下由它发布的作品。删除前可以整个下载。
密钥在你的页面上撤销，立即生效。
为你生成的图片和视频，七天后删除。
工具请求的记录，在对改进 moe 还有用的期间内保存。
播放次数和来访人数的计数按月保存。其中不含任何人的信息，所以没有需要删除的东西。
彻底关闭账号——连同邮箱地址和账号记录——目前你的页面还做不到。以后会有；在那之前，这里会给出一个可以写信的地址。

变更

本说明变更时，顶部的日期会变；变更重要的，会发邮件告知。

服务提供的条件见服务条款。