Privacy Policy

Last updated: 2026-07-26

What we store

Account: email, hashed password (or OAuth provider token), creation date.
Billing: handled entirely by our payment providers — we never see your card details, and for crypto we never hold your keys. We store only a provider reference (transaction or subscription id), the amount, and the date.
Usage: per-generation logs (timestamp, model, parameters, server, time taken). No image content beyond what you actively save to your library.
Generated images: cards and images you pull are kept as part of your collection so you can see them in-game. They are removed when you delete the item or close your account.

What we don't store

Your prompts after the gen completes (logs are retained ~14 days for debugging then purged).
Cookies for ad tracking. We use a single session cookie for auth.
Any data shared with third parties beyond the providers listed below.

Cookies

We use one HTTP-only session cookie for login and one localStorage flag (waifu_age_v1) to remember your age confirmation. We also use Google Analytics, which sets its own cookies (_ga, _ga_*) to measure overall traffic, and a first-party random id in localStorage (wm_sid) that we use to count page views. No advertising cookies and no ad networks.

Third parties

NOWPayments — crypto payments and subscriptions. Privacy policy.
Patreon — card billing, only if you choose to support us there. Privacy policy.
Cloudflare — DNS / CDN / DDoS. Privacy policy.
Google Analytics — aggregate traffic measurement. Privacy policy.
No ad networks. No data brokers.

If you pay by direct crypto transfer, note that the transaction itself is recorded on a public blockchain by design — that ledger is outside our control.

Your rights

You can:

Request a copy of your account data and generations — contact us and we will send it.
Request deletion of your account and everything attached to it — contact us.
The same address handles GDPR / CCPA and equivalent requests: see Contact.

Children

The service is restricted to adults. If we learn an account belongs to someone under 18, the account is deleted immediately and any payments refunded.