Privacy Policy

This Privacy Policy explains what information CartoonFamilyPicture ("we", "us") collects when you use cartoonfamilypicture.com (the "Service"), how we use it, and the choices you have. By using the Service you agree to this policy.

1. Information we collect

Account information

When you sign up we collect your email address and a password. Passwords are never stored in plain text — we save only a salted PBKDF2-SHA256 hash, so nobody (including us) can read your password.

Photos you upload

To generate a portrait we process the photos you upload (which may contain faces of adults and children, and pets) and the images produced from them.

Technical data

Standard server data needed to operate and protect the Service, such as IP address (used for sign-up rate limiting), browser type, and basic request logs.

2. How we use your information

• To create and deliver your cartoon family portrait;
• To manage your account and free generation credits;
• To provide the generated image for download and keep it available at its link;
• To prevent abuse, fraud and automated sign-ups (rate limits and optional bot verification);
• To respond if you contact us.

We do not sell your personal data, and we do not use uploaded photos for advertising.

3. How photos are processed and stored

Uploaded photos and generated images are stored on encrypted cloud object storage provided by our hosting provider, Cloudflare. To perform the AI transformation, photos are temporarily transmitted to our third-party AI image-generation provider (Volcengine Ark) solely to produce your portrait; we do not authorize it to retain or reuse your images for model training.

Reference photos and results are associated with your account ID rather than your name. You can request deletion at any time (see Section 7).

4. Cookies

We use a single secure, HttpOnly session cookie to keep you signed in. It cannot be read by JavaScript and is not used for cross-site tracking. No advertising or third-party tracking cookies are set by us.

5. Data sharing & service providers

We share data only with processors that are necessary to run the Service:

• Cloudflare — hosting, database, storage, content delivery and security;
• Volcengine Ark — AI image generation (receives your uploaded photos transiently to render the result).

We may disclose information if required by applicable law or a valid legal request.

6. Data security

We apply reasonable safeguards including hashed passwords with per-user random salts, encrypted storage, strict cookie flags, per-account generation limits, and IP-based registration limits. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

7. Your choices & data rights

You may request access to, correction of, or deletion of your account, uploaded photos and generated images at any time by emailing hello@cartoonfamilypicture.com. We will action verified requests within 30 days. You can also stop using the Service at any time.

If you are in the EU/EEA, UK, California or another jurisdiction with privacy laws, you may have additional rights to access, correct, export or object to processing of your personal data; exercising them is as simple as sending us an email.

8. Children's privacy

The Service is intended for use by adults (or parents creating portraits of their own family, including their children). We do not knowingly let children under 16 create accounts. If you believe a child has provided us personal data without consent, contact us and we will delete it.

9. Data retention

We keep account data while your account exists and photos/results for as long as needed to provide your downloadable portrait, after which they may be deleted. You may request earlier deletion at any time.

10. Changes

We may update this policy; material changes will be reflected by the "Last updated" date. Continued use after changes constitutes acceptance.

11. Contact

Questions about privacy or data requests: hello@cartoonfamilypicture.com or via our contact page.