Privacy Policy

1. Overview

This Privacy Policy explains how cumface-generator.xxx ("we," "our," or "the Service") collects, uses, and protects information when you use our AI image generation service. We are committed to protecting your privacy and have designed our systems with data minimization as a core principle.

By accessing or using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Service immediately.

2. Information We Do Not Collect

We have designed the Service to operate with minimal data collection. Specifically, we do not collect:

• Your name, email address, or any personally identifiable information on the free tier
• Account credentials (no registration required to use the free tier)
• Your uploaded photos after processing is complete
• Generation history or logs tied to your identity
• Payment information on the free tier
• Location data beyond what is technically transmitted with standard web requests

3. Uploaded Images — Deletion Policy

Technical detail: uploaded images are loaded into memory for processing and are never written to persistent storage. The generation pipeline produces an output file, which is made available to you via a temporary delivery URL. The source image is cleared from memory immediately after the output is generated.

Temporary delivery URLs for generated content expire after a short period and are not indexed or accessible to other users.

4. Automatically Collected Technical Data

Like all web services, our servers receive certain technical information with each request. This includes:

• IP address (used for rate limiting and abuse prevention only)
• Browser type and version (User-Agent header)
• Referring URL and pages visited on the Service
• Date and time of requests

This data is retained in server logs for a maximum of 7 days for security and operational purposes only, after which it is automatically purged. It is not used for advertising, profiling, or sale to third parties.

5. Cookies and Tracking

The Service uses only technically necessary session cookies required for the generation workflow to function. We do not use:

• Advertising or tracking cookies
• Third-party analytics platforms (Google Analytics, etc.)
• Social media tracking pixels
• Persistent user identification cookies

Session data is cleared automatically when you close your browser session.

6. Premium Accounts

Users who subscribe to a premium plan provide an email address and payment information. Payment processing is handled entirely by our third-party payment processor (Stripe or equivalent) and we do not store credit card numbers or full payment details on our servers. Premium account data is retained for the duration of your subscription and for up to 90 days after termination for billing dispute resolution purposes.

7. Data Security

All data transmitted between your device and our servers is encrypted using TLS 1.3. Uploaded images are processed over encrypted channels and are never transmitted in plain text. We implement industry-standard security measures including access controls, network segmentation, and regular security audits.

While we take reasonable steps to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

8. Third-Party Services

The Service may use third-party infrastructure providers (cloud hosting, CDN services) to deliver content. These providers are contractually obligated to process data only as instructed by us and may not use it for independent purposes. We do not sell, rent, or trade your personal data to any third party.

9. Children's Privacy

The Service is strictly for adults aged 18 and over. We do not knowingly collect any information from persons under 18. If you believe a minor has used the Service, please contact us immediately and we will take appropriate action, including deletion of any associated data.

10. Your Rights

Depending on your jurisdiction, you may have the following rights regarding personal data we hold about you:

• Right to access — request a copy of data we hold about you
• Right to deletion — request erasure of your personal data
• Right to rectification — request correction of inaccurate data
• Right to object — object to processing of your data
• Right to data portability — receive your data in a machine-readable format

Because we collect minimal data and do not create user profiles on the free tier, most of these rights will be satisfied by our default data practices. To exercise any right, contact us at the address below.

11. International Users

The Service is operated from servers that may be located in various jurisdictions. By using the Service, you consent to the processing of any technical data in these jurisdictions, which may have different data protection laws than your country of residence. We apply the same data minimization principles regardless of jurisdiction.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this document. Continued use of the Service after changes constitutes acceptance of the revised policy. We encourage you to review this page periodically.

13. Contact

For privacy-related questions, data requests, or concerns, contact us via the contact information available on our website. We aim to respond to all privacy inquiries within 30 days.