MorselWho is responsible
Goof Technology (Guangzhou) Co., Ltd, registration number 91440106MAKRKDRW6J, Room B23, Floor 04, No. 10 Kangti Road, Huangcun, Tianhe District, Guangzhou, Guangdong, is the controller for the personal data described here.
Privacy contact: zengzy@goof.com.cn. Data protection contact: zengzy@goof.com.cn.
The short version
- Processing location depends on the tool. The tool page states whether files stay in your browser or are uploaded. Uploaded files are used only for the job, are not used to train models, and are deleted within 24 hours.
- Morsel stores account details, session data, job metadata, credit and billing records, and contact messages.
- Morsel uses Cloudflare for hosting and the database, and Resend for email delivery.
- Morsel does not sell personal data and does not run third-party analytics or advertising scripts.
- You can export account data and delete your account from the account settings.
Data we process
| Category | What it includes | Purpose |
|---|---|---|
| Account | Email address, email hash, role, status, plan, credit balance, locale, creation and login times, deletion and ban flags | Sign-in, account operation, plan and credit enforcement |
| One-time codes | Email hash, code hash, intent, expiry, attempts, IP hash, timestamps | Sign-in and account-deletion verification |
| Sessions | Hashed session token, user agent, IP hash, creation, last-seen and expiry times, revocation time | Keeping you signed in and protecting the account |
| Jobs | Tool, status, input count, bytes and duration, options, engine, error code, credit reservation and capture, timestamps | Metering, settlement, failure handling, abuse prevention |
| File contents (upload tools) | The file you submit and the output generated, held temporarily for the job | Performing the requested conversion; deleted after the job and within 24 hours |
| Credits and billing | Ledger entries, lot balances, subscription periods, invoices, refund requests | Credit accounting, subscription operation, refunds, tax and accounting |
| Contact messages | Name (optional), email, topic, message, locale, IP hash, timestamps, handled time | Replying to support, privacy, refund, and abuse reports |
| Technical data | Request metadata processed by Cloudflare, such as IP address, user agent, and request time | Delivery, security, and abuse prevention |
What we do not collect
- File contents after a job. Browser tools do not send file contents to us; uploaded files are deleted within 24 hours.
- File names in job records. Job records store counts and sizes, not the names of your files.
- Passwords. Sign-in uses a one-time email code.
- Payment card details. Payments are not enabled; when they are, card data will be handled by the payment processor, not stored by Morsel.
- Advertising identifiers or cross-site tracking data.
Why we process data and our legal bases
- Contract: creating and operating the account, providing tools, metering credits, handling subscriptions, and answering support requests.
- Legitimate interests: securing the service, preventing abuse, maintaining reliability, and keeping business records. We balance these interests against your rights.
- Legal obligation: tax, accounting, fraud prevention, and responding to lawful requests.
- Consent: where we ask for it specifically, such as optional communications. You can withdraw consent at any time.
Cookies and browser storage
Morsel uses a session cookie to keep you signed in. It is HttpOnly, Secure, SameSite=Lax, and scoped to the site. A language preference cookie may be read to choose English or Chinese. The service does not use advertising cookies.
The tools may store an idempotency key in sessionStorage so a retried request does not reserve credits twice. That key is removed after the job settles and is not available to the server after the tab closes.
Sharing and subprocessors
Morsel shares data with Cloudflare and Resend as needed to run the service. Cloudflare provides hosting, the API worker, and the D1 database. Resend delivers sign-in and contact notification email.
Data may also be disclosed if required by law, to protect rights or safety, to investigate abuse, or as part of a merger, acquisition, or transfer of the service. We do not sell personal data.
The current subprocessor list is also shown on the About page. Material changes to that list will be reflected in the privacy policy.
International transfers
Cloudflare operates a global network and may process data in countries other than yours. Where required, transfers rely on appropriate safeguards such as standard contractual clauses or an equivalent mechanism offered by the provider.
The specific data residency of the D1 database depends on the deployment configuration. Contact privacy for the current configuration.
How long we keep data
Pseudonymized operational records, including audit logs, are scheduled for deletion after 12 months. Production sets AUDIT_RETENTION_DAYS=365 and runs the cleanup daily; a longer period applies only where required by law or needed to resolve a dispute.
| Data | Retention |
|---|---|
| Account and profile | Until you delete your account, then anonymized |
| Sessions | Until expiry, then deleted by scheduled cleanup; revoked sessions are deleted after 30 days |
| One-time codes | Expire after 10 minutes; records are deleted about one day after expiry |
| Rate-limit counters | About two days |
| Job metadata | For the life of the account; after deletion it may be kept in pseudonymized form for security and accounting |
| Uploaded files (server tools) | Held only for the job and deleted within 24 hours; browser tools do not send file contents |
| Credit ledger, invoices, refund records | Kept in pseudonymized form as required for accounting, tax, and legal obligations |
| Contact messages | Until the request is handled and for as long as needed for support history; you can ask us to delete a message |
| Audit log | Administrative and security events with actor/target IDs, IP hash, and action payload; deleted by scheduled cleanup after the configured audit retention period |
| Technical logs | Per the hosting provider’s retention, used for security and operations |
Security
Morsel hashes session tokens and one-time codes before storage, signs the session cookie, and restricts it to HTTPS. Access to production data is limited and administrative actions are logged.
No system is completely secure. If you believe your account is compromised, sign out of all sessions and contact privacy.
Your rights
To exercise a right, contact zengzy@goof.com.cn. We may need to verify your identity before acting.
- Access and export: request a copy of your account data; the account export produces JSON.
- Rectification: correct an inaccurate email or account detail.
- Erasure: delete your account and request deletion of other data, subject to legal retention obligations.
- Restriction and objection: ask us to limit or stop certain processing, including direct marketing.
- Portability: receive eligible data in a structured, commonly used format.
- Withdraw consent: where processing relies on consent, withdraw it without affecting earlier processing.
- Complain: contact a supervisory authority in your jurisdiction.
Account deletion
Account deletion is available from the account settings. It requires a second one-time code sent to your email address.
A verified deletion anonymizes the email address, revokes all sessions, cancels an active subscription, removes one-time codes and rate-limit records, and clears audit fingerprints. Invoices, ledger entries, and other records required for accounting or legal obligations are retained in pseudonymized form.
Deletion is immediate for the active account. Residual copies in backups are removed according to the hosting provider’s backup cycle.
Children
The service is not directed to children under 16. Do not create an account if you are under 16 or below the age of digital consent in your jurisdiction. If we learn that such an account exists, we will close it.
Automated decisions
Credits are reserved and settled by automated rules, and rate limits can temporarily block a request. These controls enforce usage and security; they do not make decisions about your legal status or produce legal effects.
Changes and contact
The effective and last updated dates at the top of this page show the current version. Material changes will be announced in the service or by email where appropriate.
Privacy questions and requests: zengzy@goof.com.cn. Data protection contact: zengzy@goof.com.cn. General support: shenyb7@goof.com.cn.