Privacy Policy

Last updated: May 1, 2026

This Privacy Policy describes how AIPhoto.net ("we", "us", "our") handles information when you use our website and AI image generation service at aiphoto.net. We are committed to minimal data collection and maximum transparency.

1. What We Collect

1.1 Rate Limiting Data

To enforce our free daily limit (5 images per day), we store a hashed version (SHA-256) of your IP address paired with a generation count and date. We never store your raw IP address. This data is automatically purged after 7 days.

1.2 Server Logs

Our web server automatically logs standard access data: the requested URL, HTTP status code, request timestamp, and browser user agent string. These logs are retained for up to 14 days for security and performance analysis, then deleted.

1.3 Session Cookie

We set a single, essential session cookie to maintain your current browsing session. This cookie expires when you close your browser. We do not use any tracking, advertising, or analytics cookies.

1.4 Voluntary Contact

If you email us at hello@aiphoto.net, we retain your email address and message content to respond to your inquiry. We do not add you to marketing lists without explicit consent.

1.5 Newsletter Signup

If you subscribe to our newsletter via the footer form, we store your email address to send you product updates. You can unsubscribe at any time by clicking the unsubscribe link in any email or contacting us directly.

2. What We Do NOT Collect

  • We do not store your text prompts.
  • We do not store your generated images on our servers.
  • We do not collect names, addresses, or any personal identifiers.
  • We do not track your behavior across websites.
  • We do not use advertising networks or sell data to third parties.

3. Third-Party AI Services

When you generate an image, your prompt is transmitted to our AI infrastructure partners:

  • OpenRouter (openrouter.ai): Our API gateway. Prompts pass through OpenRouter's systems. See their Privacy Policy.
  • AI Model Providers: Depending on your model selection, prompts are processed by Black Forest Labs (Flux), OpenAI (DALL·E 3), or Stability AI (SDXL). Their respective privacy policies apply.

4. Data Security

We use HTTPS encryption for all data in transit. IP addresses are hashed before storage, preventing identification. Rate limit data has automatic expiration. We implement standard server hardening practices.

5. Your Rights

Under GDPR (EU), CCPA (California), and similar laws, you may have rights to access, correct, or delete data we hold about you. Since we collect minimal anonymized data, there is typically little to act upon. To exercise any data rights, contact us at hello@aiphoto.net.

6. Children

AIPhoto.net is not intended for users under 13 years old. If you believe we have inadvertently collected information about a child, please contact us immediately.

7. International Transfers

Our servers may be located in or transfer data through countries outside your region. By using AIPhoto.net, you consent to this processing. We ensure transfers comply with applicable data protection law.

8. Changes

We may update this policy periodically. The "Last updated" date reflects the latest revision. Continued use after changes constitutes acceptance.

9. Contact

Privacy questions or requests: hello@aiphoto.net