The short version
- An account is optional. If you sign in, we keep your email address (and your name and picture if you use Google). No passwords.
- An anonymous cookie id and a hashed IP enforce the free-generation limits. We never store your raw IP address.
- Your prompt and image go to our AI and moderation providers only to create and screen your image.
- Generated images are deleted automatically after 30 days.
- If you buy a plan or credits, PayPal processes the payment. We never see or store your card details.
- Our analytics are cookieless and don’t track you across other sites.
This summary is for convenience. The full text below is what applies.
01Overview
AI Photo Generator is operated by Hou Jie, an individual based in China, who is the data controller for this site.
The site works without an account; signing in is optional. This policy explains what data we collect, why we collect it, and how it is used.
02What we collect
Accounts are optional. You can use AI Photo Generator without an account. If you choose to sign in, with Google or with a one-time link sent to your email, we create an account for you. We never ask for or store a password.
To run the Service, we handle the following:
| Data | Why, and for how long |
|---|---|
| Prompt text | To turn your words into an image and to screen them for content that breaks our Terms.Shared with our AI and moderation providers (see section 4). |
| Generated images | So you can download them again, and so they can be screened by moderation.Deleted automatically and permanently after 30 days. |
| Anonymous cookie idRandom, set in your browser | To enforce the free-generation limits fairly.Expires after 12 months, or sooner if you clear your cookies. We keep only a count of the free images made with it. |
| Hashed IP addressOne-way hash | To enforce the free-generation limits fairly, alongside the cookie id.Your raw IP address is never stored. |
| Account detailsOnly if you sign in | Your email address, plus your name and profile picture when you sign in with Google, to identify your account, apply your plan and send sign-in links.Kept until you ask us to delete your account. |
| Billing recordsOnly if you buy a plan or credits | Your PayPal order and subscription ids, plan, subscription status and credit balance and history, to apply what you bought. Card and PayPal account details are handled by PayPal and never reach us.Kept while your account exists, and longer where tax and accounting law requires. |
| Sign-in sessionsOnly if you sign in | To keep you signed in; each session records the IP address and browser it was created from, for security.Expire after 30 days, or when you sign out. |
| Aggregate trafficCloudflare Web Analytics | To understand overall traffic to the site.Cookieless, with no persistent identifiers. |
When you are signed out, neither the cookie id nor the hashed IP is linked to any personal identity. When you are signed in, your daily free limit is counted against your account.
03How we use it
We use the data above only to:
- generate the images you ask for;
- screen prompts and images for content that violates our Terms of Service;
- enforce the free-generation limits fairly;
- process purchases and keep track of your credit balance;
- understand aggregate traffic to the site.
We don’t sell your data, and we don’t use it for advertising.
04Who we share it with
To turn your prompt into an image, your prompt text and the resulting image are sent to:
- Third-party AI image providers, such as Replicate or fal.ai, which generate the image;
- Moderation providers (fal.ai and SeeAPI), which automatically screen prompts and images for content that violates our Terms of Service.
If you sign in, your account data is also processed by:
- Google, if you choose “Continue with Google”, which confirms your identity and shares your name, email address and profile picture with us;
- Resend, which delivers the one-time sign-in emails;
- Cloudflare, which hosts the Service and the database that stores your account.
If you buy a plan or credits, your payment is processed by:
- PayPal, which receives your name, email address and payment details to take the payment and prevent fraud. Checkout runs on PayPal’s own pages under PayPal’s privacy statement; we never see your card or PayPal account details.
These providers process the data only to fulfil your request and to perform moderation checks. We may also disclose information if the law requires us to.
05Retention
Generated images are stored for 30 days so you can download them again, and are then automatically and permanently deleted from our storage.
The anonymous cookie id expires after 12 months unless you clear it sooner. We never store your raw IP address for quota tracking, only its one-way hash.
Account details are kept until you ask us to delete your account. Sign-in sessions expire after 30 days, and unused sign-in links expire after 15 minutes.
06Cookies and analytics
We set an anonymous, randomly generated id used for quota tracking. If you sign in, we also set session cookies that keep you signed in. None of these cookies are used for advertising or to follow you around the web.
We use Cloudflare Web Analytics, a cookieless analytics service, to understand aggregate traffic to the site. It does not use cookies or any persistent identifiers and does not track you across other sites.
07Your choices
- You can clear the cookie id at any time from your browser settings.
- You can download images you want to keep before they are deleted after 30 days.
- You can sign out at any time from the account menu.
- You can email us to access, correct or delete your account and its data. If you are signed out, we may need details such as the approximate time of a generation to find the data involved.
08Children
The Service is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us.
09Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will change the “Last updated” date at the top of this page.
10Contact
If you have questions about this Privacy Policy or how your data is handled, get in touch.