Privacy Policy

Last updated: 2026-05-06

What we store

Account: email, hashed password (or OAuth provider token), creation date.
Billing: handled by Stripe — we never see your full card. Stripe customer ID + invoice metadata only.
Usage: per-generation logs (timestamp, model, parameters, server, time taken). No image content beyond what you actively save to your library.
Generated images: stored on our servers for 30 days, then auto-deleted unless you saved them to a Collection.

What we don't store

Your prompts after the gen completes (logs are retained ~14 days for debugging then purged).
Cookies for ad tracking. We use a single session cookie for auth.
Any data shared with third parties beyond Stripe (billing) and Cloudflare (CDN/DNS).

Cookies

We use one HTTP-only session cookie for login and one localStorage flag (waifu_age_v1) to remember your age confirmation. No analytics cookies.

Third parties

Stripe — billing. Privacy policy.
Cloudflare — DNS / CDN / DDoS. Privacy policy.
No ad networks. No data brokers.

Your rights

You can:

Export all your generations + account data via Account → Export.
Delete your account and all data via Account → Delete.
Email us a GDPR / CCPA / equivalent request: see Contact.

Children

The service is restricted to adults. If we learn an account belongs to someone under 18, the account is deleted immediately and any payments refunded.