Privacy Policy

Effective date: July 29, 2026 Last updated: July 29, 2026

1. Scope and Who We Are

This Privacy Policy applies to faceswap, the independent AI face-transformation service available at charliekirkface.net, including its public articles, account features, image tools, purchases, and support channels. In this policy, “faceswap,” “we,” “us,” and “our” refer to the operator of this website.

This notice explains what information we collect, why we use it, when it is shared, how long it may be retained, and the choices available to you. It does not apply to third-party websites or services that have their own privacy notices.

2. Information We Collect

The information we collect depends on how you use the site.

Information you provide

• Account and authentication data: name, email address, profile image, account identifiers, authentication provider, and password credentials in hashed form when you use email-and-password sign-in. If you choose Google or GitHub sign-in, we receive the profile information that provider makes available under your authorization.
• Uploaded and generated content: source images, face-reference images, generated outputs, file names and formats, processing settings, and other content you submit to the tool.
• AI task information: task and request identifiers, selected model or feature, processing status, timestamps, output locations, timing information, and error or diagnostic details.
• Transaction information: selected plan or credit package, order and subscription status, billing email, currency, payment-provider transaction identifiers, invoice or receipt links, and credit balance. The payment provider shown at checkout collects and processes full payment-card or bank details; faceswap does not receive or store complete card numbers.
• Communications: messages, attachments, and contact details you provide in support, privacy, abuse, or takedown requests.

Information collected automatically

• Technical and log data: IP address, approximate location derived from IP, browser and device type, operating system, language, referring page, requested URLs, timestamps, request status, and security or rate-limit signals.
• Usage data: pages viewed, features used, button or navigation interactions, task activity, and general performance data.
• Attribution data: referral and campaign parameters, such as UTM source information, which may be stored in a cookie and associated with an account when one is created.
• Cookies and similar technologies: session cookies, locale and preference cookies, local storage, analytics identifiers, and advertising cookies or identifiers where enabled.

3. How We Use Information

We use information to:

• create, authenticate, secure, and maintain accounts;
• receive uploads, submit face-swap jobs, return results, and record task status;
• deliver purchased plans or credits, process orders, manage subscriptions, and prevent payment fraud;
• provide customer support and respond to privacy, safety, and takedown requests;
• monitor reliability, diagnose failures, enforce rate limits, prevent abuse, and protect users and the service;
• understand aggregate site usage, improve features, and measure content performance;
• display and measure advertising, where advertising is enabled;
• comply with legal obligations and establish, exercise, or defend legal claims; and
• communicate important service, security, billing, or policy updates.

Where applicable law requires a legal basis, we rely on one or more of the following: performance of a contract with you, our legitimate interests in operating and securing the service, your consent, and compliance with legal obligations. You may withdraw consent where processing is based on consent, without affecting processing that occurred before withdrawal.

4. How Image Processing Works

Image processing requires data to move through several systems:

1. Your browser uploads the selected image to storage configured for faceswap.
2. faceswap sends the image location and required job settings to PiAPI, our current third-party AI processing provider.
3. PiAPI processes the request and returns task status and output information.
4. The result may be copied to our configured Cloudflare R2 or S3-compatible object storage so it can be delivered reliably.
5. faceswap records operational task data, including status, timing, provider identifiers, output location, and errors, for delivery, support, fraud prevention, and troubleshooting.

Do not upload an image unless you have the legal right to use it and any consent required from people depicted in it. Uploaded and generated images can contain personal information and may be sensitive depending on their content and the law where you live.

5. Service Providers and Other Recipients

We disclose information only as reasonably necessary for the purposes described above. Recipients may include:

• PiAPI, to process face-swap requests and return AI-generated results;
• Cloudflare and configured R2 or S3-compatible infrastructure providers, for hosting, content delivery, security, file storage, and transfer;
• Google and GitHub, if you choose their optional sign-in methods;
• Creem, our current checkout provider and merchant of record, for payments, tax, receipts, refunds, and subscription administration. If another payment provider is offered, it will be identified at checkout;
• Google Analytics, for site measurement and performance analysis;
• Google AdSense, for advertising delivery, fraud prevention, and ad measurement;
• email, support, logging, and security vendors used to operate the service;
• professional advisers, auditors, insurers, regulators, courts, or public authorities when reasonably necessary or legally required; and
• a successor or transaction participant if the service is involved in a merger, financing, reorganization, asset sale, or similar business transaction, subject to appropriate safeguards.

Each third party processes information under its own terms and privacy notice. We do not sell uploaded images or account details for money. Advertising-related disclosures may nevertheless be considered “sharing,” “targeted advertising,” or a “sale” under certain privacy laws; applicable choices are described below.

6. Google Analytics, AdSense, and Cookies

faceswap uses Google Analytics and Google AdSense. When these services are active, your browser may send Google information such as the page URL, IP address, browser or device information, and cookie or advertising identifiers. Google may use that information to provide and secure its services, measure traffic and advertising, prevent fraud, and personalize ads where permitted by your settings and applicable law.

You can learn more from Google’s explanation of how it uses information from sites and apps that use Google services. You can also manage ad personalization through Google Ads Settings and use the Google Analytics opt-out browser add-on.

Your browser can block or delete cookies. If a consent prompt is displayed, you can use it to make the choices offered there. Blocking required session or preference cookies may affect sign-in, language settings, or other features. To submit an advertising privacy or opt-out request available under the law where you live, contact us at the address below.

7. Data Retention

We retain information for only as long as reasonably necessary for the purpose for which it was collected, including to provide the service, maintain security, resolve disputes, and satisfy accounting or legal requirements. Retention varies by data type and context:

• account and authentication records are generally kept while the account is active and for a reasonable period afterward where needed for security, disputes, or legal compliance;
• uploads and generated outputs may be retained in our storage and a processing provider’s systems as needed to complete the job, deliver the result, investigate failures or abuse, and operate the service;
• AI task records and technical logs may be retained for reliability, support, fraud prevention, and audit purposes;
• order, invoice, payment, subscription, and tax records may be retained for the periods required by payment providers and applicable accounting, tax, chargeback, and consumer-protection laws; and
• support and takedown communications may be retained to resolve the request and document our response.

Deleting an account or requesting deletion does not necessarily remove information immediately from encrypted backups, payment records, fraud-prevention systems, or third-party provider systems. Residual copies may remain for a limited period or where retention is legally required. We will evaluate verified deletion requests under applicable law.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including authenticated access controls, encrypted HTTPS transport, restricted service credentials, and storage-provider security controls. No internet transmission, AI provider, or storage system can be guaranteed completely secure. Protect your password, do not reuse it on other services, and contact us if you suspect unauthorized account access.

9. International Data Transfers

faceswap and its providers may process information in countries other than the country where you live. Those countries may have different data-protection laws. Where required, we use contractual, technical, or other recognized safeguards for international transfers. By using third-party sign-in, payment, analytics, advertising, storage, or AI processing, your information may also be transferred according to those providers’ notices.

10. Your Privacy Rights

Depending on where you live and subject to legal exceptions, you may have the right to:

• know whether and how we process your personal information;
• request access to or a copy of your information;
• correct inaccurate or incomplete information;
• request deletion or restriction of processing;
• object to certain processing, including direct marketing or targeted advertising;
• withdraw consent where consent is the legal basis;
• request data portability;
• appeal a denied request where applicable; and
• complain to your local data-protection or privacy authority.

To exercise a right, email support@charliekirkface.net with the subject “Privacy Request” and identify the account or data involved. We may ask for information reasonably necessary to verify your identity and authority. Authorized agents may submit requests where permitted by law. We will not discriminate against you for exercising an applicable privacy right.

11. Children

faceswap is intended for adults aged 18 and older. We do not knowingly collect personal information from children or permit use of the face-swap tool by minors. Do not upload images of minors for sexualized, exploitative, deceptive, or otherwise harmful purposes. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

12. Third-Party Links

Our articles and pages may link to third-party websites. A link does not mean that we control or endorse that site’s privacy practices. Review the third party’s privacy notice before providing information to it.

13. Changes to This Policy

We may update this policy when the service, providers, or legal requirements change. We will post the revised policy here and update the “Last updated” date. If a change materially affects how we use information already collected, we will provide additional notice or obtain consent where required by law.

14. Contact Us

For privacy questions, requests, or complaints, contact:

Email: support@charliekirkface.net Website: https://charliekirkface.net

We aim to acknowledge legitimate requests promptly and generally respond within 3 business days, although verification and full resolution may take longer where permitted by law.