Privacy Policy

Photos and generated pictures

The free manual Santa hat editor processes your selected photo in your browser. It does not upload that photo to our server. Its downloaded PNG is saved by your browser.

For paid AI editing, we send a resized copy of your photo and the chosen editing instructions to OpenAI. If OpenAI explicitly rejects a request because its API credit balance is exhausted, our configured backup provider APIMart may perform the edit. The backup is not used automatically for a timeout or a content rejection. These providers process the image under their own privacy and data policies. Only upload photos you have permission to use.

We do not publish your uploaded photo or AI results in a public gallery. Generated images are kept in private Cloudflare R2 storage and are accessible through your signed-in account. Download your results within 30 days; stored results are scheduled for deletion after that period. Your input image is used for the request and is not saved in our results bucket.

Accounts and service records

We store your email, account name, password hash, session records, support requests, purchase references, credit balance and generation records in Cloudflare D1. Usage records include the model, request status and token or image cost where available. We use these records to deliver the service, prevent duplicate charges, investigate failures and respond to payment disputes.

Payments

Waffo Pancake provides hosted checkout and payment processing. Billing and card details are entered on the provider’s checkout page. Our application stores payment references and verification results, rather than your full card details.

Cookies and analytics

Essential cookies keep you signed in. Your theme preference may be saved in browser storage. When Google Analytics is configured, we measure page views and actions such as choosing a style, beginning checkout and completing a generation. Analytics events do not include your photo, editing image bytes, email address or payment credentials.

Your choices

You can use the free editor without an account. Email contact@christmaspfp.online to ask about your data or request account deletion. Some transaction and fraud-prevention records may need to be retained for payment and legal obligations.

Service providers

The service uses Cloudflare for hosting, database and image storage; OpenAI and, when configured, APIMart for AI image processing; Waffo Pancake for checkout; and Google Analytics when enabled. Their processing is subject to their respective terms and privacy policies.