We collect waitlist, purchase, license, activation, installation and support information, including reports of misuse, and optional usage statistics. Your fal.ai API key is stored on your computer and sent only to fal.ai. Our website statistics are cookieless and do not identify you: our server counts page views and downloads with the time, the page, the referring site and the country, and stores no IP address, no browser details and no cookie. We also use the Meta pixel and the Google Ads tag to measure our own advertising, but only if you allow it: neither loads until you say yes, and declining changes nothing about the site.
In the aescripts.com edition, aescripts.com handles purchases and licensing under its own privacy policy. Its licensing framework runs a local license-check program and contacts aescripts' servers for licensing and update checks. Its separate option labelled "Gather anonymous analytics" was switched on by default in our testing and can be switched off in its window; we do not control what that framework collects. This edition sends no licensing requests or installation reports to us, and receives no update notices or announcements from us. Our optional usage statistics, off by default, work as described above and include a marker identifying the aescripts.com edition. What stays on your computer applies to both editions.
Your fal.ai API key is stored locally on your machine and is sent only to fal.ai itself, over an encrypted connection. It never passes through our servers. Your generations, prompts and history are stored inside your own projects and your fal.ai account; we do not access their contents through Summon. We do receive material you choose to send to support, and generation metadata (never prompts or files) if you enable usage statistics.
Our website and license server run on Cloudflare. The website counts page views and installer file requests on our own server, without cookies: for each one it keeps the time, the page, the referring site and the country. When a page is opened from a campaign link, the campaign and source labels in the link (the five utm parameters) are stored with the view; only short labels are accepted. While you move between pages of this site through its own links, those labels are carried along in the link, so the next page, a click on a link to the download page, a click on the installer file and the request for the installer file are counted with the same labels. Where the browser supports it, the page script attempts one engagement snapshot when a page is hidden or left: the page, the seconds it was visible, the deepest scroll position, the labels, the time and the country. Very short visits may not report, and a page restored from your browser's back/forward cache may report again. On pages with tutorial videos, the page script also counts, once per page view, when each video first starts playing and when it first reaches 90 percent of its length: the page, which video, the labels, the time and the country. Clicks on the homepage's main buttons (download, plans and buy) are also counted, with the button, the page and the time. These analytics set no cookie, use no browser storage, do not store IP addresses or browser details, and do not assign a visitor identifier. Campaign labels are filtered for format, not meaning, so a label written into a link by whoever made it could carry identifying text; we do not use labels that way. They do not identify unique visitors: we do not join these records to each other, so each one is a count of one event. They count requests, including those made by automated visitors and repeated file requests, not people. Labelled links do appear in your own browser history, like any address you open. These records, including click and video events, are kept for up to 2 years. Cloudflare, which hosts the site, keeps its own infrastructure logs under its privacy policy; we do not use those logs to identify visitors. Generation requests go from your computer directly to fal.ai under fal.ai's privacy policy. Payments are processed by Freemius, our merchant of record, under its privacy policy.
We advertise Summon, and to learn whether those ads work we use the Meta Pixel and the Google Ads tag on summonfx.com. They run only after you press Allow in the small prompt at the bottom of the page. Until then, nothing is requested from Meta or Google at all. If you decline before allowing, neither is loaded. If you decline after allowing, we stop sending new measurement events; requests already issued may still complete. Declining does not limit anything: you can browse, download and buy exactly the same way.
When allowed, the pixel sets one cookie in your browser (_fbp) and reports to Meta which pages on our site you viewed, so Meta can tell us that a visit came from one of our ads. Meta processes that data under its own privacy policy and may combine it with your Meta account if you have one. We have switched off Meta's automatic collection of form fields, button text and matching data, and we do not send Meta your name, email address, form contents, license keys or payment details. Besides page views, we report clicks on the trial download button, attempts to open the checkout, and completed purchases as confirmed by our checkout provider. Checkout events include the selected plan; purchase events include the amount and currency when the checkout reports a valid amount in a supported currency. We do not include buyer names, email addresses, license keys or payment details in these events.
When allowed, the Google Ads tag sets its own cookies in your browser (such as _gcl_au, and _gcl_aw when you arrive from a Google ad) and reports to Google which pages on our site you viewed, so Google can tell us that a visit came from one of our ads. It reports the same actions as the pixel: clicks on the trial download button, attempts to open the checkout, and completed purchases, with the amount and currency for purchases. We use it only to measure our ads: it is set not to use your visits for ad personalization, and we do not send Google your name, email address, form contents, license keys or payment details. Google processes that data under its own privacy policy.
You can change your choice at any time with the Marketing cookies link at the bottom of every page. Declining after allowing stops both on the page you are on and keeps them off from then on; to remove cookies Meta or Google already set, clear them in your browser.
We keep license and activation records as long as your license is active and for up to 3 years after it ends, for licensing, refunds, disputes and misuse investigations. Installation reports are kept for up to 3 years. Waitlist emails are kept until launch or until you ask us to remove yours. Email support@summonfx.com to access or delete your data; we may keep what the law or a pending dispute requires.