Your layout draft
The visual editor saves your current scene, text, boxes and canvas size in this browser's local storage under moss-image:layout:v1. Editing does not upload that draft to our server. Anyone using the same browser profile may be able to see it. Download a copy before clearing browser data. You can remove the saved draft by clearing this site's storage in your browser settings.
Preferences and website requests
Language preferences may use the PARAGLIDE_LOCALE cookie, and the theme preference may use browser storage. Like other websites, requesting pages or example files exposes ordinary connection information to the hosting service. The public editor does not require an account or payment. We do not send editor prompt text to analytics.
The official generation service
The on-page generator calls the official OpenMOSS Space through our server. Sign-in redirects to Hugging Face; your password is entered only there. The OAuth app requests openid, profile and read-billing: public identity, ZeroGPU quota and payment-configured status. We use these to verify free eligibility before generation. The app does not request email, private repositories, write access, Jobs, Endpoints or Inference Providers permissions.
Your temporary HF access token is encrypted in a first-party HttpOnly cookie, limited to /api/moss-hf, for at most 15 minutes. A separate encrypted login-flow cookie expires after 10 minutes. Tokens are used server-side only at official Hugging Face APIs and the official OpenMOSS Space. Signing out clears this site's session; you can also revoke the grant in HF Connected Apps.
The generator saves its prompt under moss:hf-prompt:v1 and an encrypted temporary result link under moss:hf-result:v1 in this tab's session storage, so refresh and reauthorization can restore them. These are not HF access tokens. Signing out clears the result. Clear this site's browser storage to remove drafts. Sending a layout to the generator moves it locally; only clicking Generate transmits the prompt through our server to OpenMOSS. It is not sent to analytics or automatically published. Generated PNGs pass through our server for preview/download and are not saved to a site gallery or database. Output links are temporary, account-bound and expire after one hour.
Hugging Face and OpenMOSS process submitted prompts and inference under their own policies. Review Hugging Face's privacy policy before submitting private material. We do not offer paid inference or site credits. This free-only release stops if free account status, payment status or sufficient quota cannot be verified. Operational logs exclude prompts, OAuth tokens and signed result links; they may record error codes and completed download byte counts.
Published examples
The homepage example was created for this website. Your private editor draft is not automatically published as an example. The model input and generation record for our sample are public downloads.
Updates
This notice describes the current public layout tool. We will update it if this tool adds accounts, hosted generation, uploads or other data processing.
Traffic-source cookies
The hosting application may save sanitized first-visit campaign parameters and an external referrer in first-party cookies for up to 30 days. These identify the traffic source; editor text and layout content are not included. No third-party analytics or advertising script is currently configured for this public release. Any later analytics deployment requires this notice to be reviewed.
Contact
For privacy questions, contact hello@moss-image.com. See About and verification for the scope of this independent project.