Privacy Policy

This policy explains what Christmas PFP ("we", "us") collects when you use christmaspfp.com, why, who helps us process it, and the choices you have. Christmas PFP is run by an independent developer. Questions: support@christmaspfp.com.

What we collect

When you use Christmas PFP without an account

Your first PFP doesn't need sign-up. To give you a free credit and keep your PFPs together, we create a guest session in your browser. For it we store:

a random guest account ID and a session cookie,
your credit balance,
the IP address and browser user agent your session was created from.

Google shares your name, email address, profile picture and Google account ID with us. We also store the sign-in tokens Google issues so your sign-in keeps working. We never see your Google password.

If you signed in from a guest session, the PFPs from that session move to your account.

What you give the generator

Your photo (of yourself, your pet, or someone who agreed to it). It is resized in your browser, sent to our AI provider to generate your PFP and to our content-check provider, and not stored by us afterwards. Photos of people show their face, so only upload photos of yourself or of people who have agreed to it.
Any text you add to describe details. We store it with the PFP it produced, so your history is complete.

What the generator produces

Your PFPs. We store every profile picture you generate so you can find and download it again in My PFPs.
A record of each generation: the style you chose, whether you added a photo, the result (finished, failed or blocked) and the time.

Payments

Payments are handled by Waffo.com Limited ("Waffo"), which sells our credit packs to you as our merchant of record and handles tax. Waffo's own privacy policy applies to the details you enter at checkout. We receive and store your order IDs, the pack you bought and payment status. We never receive or store your full card details.

Support messages

If you contact us, we keep your name, email address and message so we can reply.

Technical and abuse-prevention data

To stop people farming free credits, we count guest sessions and new accounts per IP address per day. These counters are deleted after 48 hours.
Cloudflare Turnstile checks that a real person is starting a guest session or sending a contact message. It evaluates signals from your browser and device; see Cloudflare's privacy policy.
Our hosting provider keeps short-term server logs (such as IP address, requested page and time) for security and troubleshooting.

Usage analytics

We use PostHog to see how the site is used: pages visited, referring site, device and browser type, approximate location from your IP address, and actions such as generating or downloading a PFP, opening the pricing page and starting or completing a checkout. Session replays record how you move through the site, with text typed into fields masked. Once you sign in, these events are linked to your account ID (not your email). In Europe we only use analytics cookies and session replay if you accept them; see the Cookie Policy. We don't use advertising cookies.

We also count page visits with Umami, a self-hosted statistics tool that sets no cookies and doesn't store your IP address: it records the page, referring site, campaign tags in the link (such as utm_source), device and browser type and country.

When your guest or Google account is created, we save with it the kind of site your visit came from (for example ChatGPT, Google, TikTok or Direct), so we can see which channels bring customers. Your browser keeps this in memory for that tab only; nothing is stored on your device.

How we use it

To run Christmas PFP: generate PFPs, keep your history and track your credits.
To prevent abuse and keep the service secure, including limiting free credits per person and blocking prohibited images.
To process payments and handle billing questions.
To understand how the site is used and improve it.
To answer your messages.
To meet legal obligations.

We don't sell your personal information, and we don't use your photos, text or PFPs to train AI models. We don't use your photos to identify you or to build face recognition templates.

If you are in the EEA or UK, we rely on contract (to provide the service you asked for), our legitimate interests (security, abuse prevention and cookieless usage statistics), your consent (analytics cookies and session replay), and legal obligation as our legal bases.

Who processes your data

We use these providers to run Christmas PFP. Each processes data only to provide its service to us:

Provider	What for	Data involved
Cloudflare	Hosting, image storage, bot check (Turnstile), abuse counters, sending and forwarding email	All service data, IP address, generated PFPs, email address and message
Neon	Database	Account, session, credit and generation records
EvoLink, running OpenAI's GPT Image 2 model	AI image generation, and temporary image hosting for the content check	Your text and uploaded photo
fal.ai, running the same GPT Image 2 model	AI image generation when EvoLink is unavailable	Your text and uploaded photo
SeeAPI	Checking text, uploaded photos, account profile pictures and generated images for prohibited content	Text and images
Google	Sign-in	Name, email, profile picture, Google account ID
Waffo (merchant of record)	Payments, tax and refunds	Billing and payment details
PostHog	Usage analytics and session replay	Usage events, device and browser data, IP address, account ID
Umami (self-hosted on our server)	Cookieless visit statistics	Page, referring site, campaign tags, device and browser type, country

These providers are based in, or process data in, the United States. Where the law requires it, transfers are covered by appropriate safeguards such as Standard Contractual Clauses.

We may also disclose information if required by law, or to protect the rights and safety of our users or others.

How long we keep it

Account data and PFPs: until you delete your account.
Guest sessions: a guest session signs out after 7 days without use. If a guest account isn't used for 30 days, we delete it, including its generation history and PFPs.
Abuse-prevention counters: 48 hours.
Analytics events and session replays (PostHog): up to 1 year.
Uploaded photos: not stored by us after generation.
Payment records: as long as tax and accounting law requires.

Your choices and rights

Delete your account any time in Settings → Security. This deletes your account, your credits, your generation history and your PFP files.
Access, correct or export your data, or ask any privacy question, by emailing support@christmaspfp.com.
If someone made a PFP of you without your consent, email support@christmaspfp.com and we'll review and remove it (see the Terms, section 6).
Depending on where you live (for example the EEA, UK or California), you may have further rights, such as to object to or restrict processing, and to complain to your local data protection authority. We don't sell or share personal information for targeted advertising.

Children

Christmas PFP is not for children under 13, and you must be at least 13 (or older where your country requires it) to use it. If you are under 18, use Christmas PFP with your parent's or guardian's permission. Only a parent or legal guardian may upload a photo of a minor. If we learn that we collected personal information from a child under 13, we will delete it. Parents can contact us at support@christmaspfp.com.