Privacy Policy

Last updated: 2026-11-10

1. Uploaded photos — deleted after 24 hours

The photo you upload to generate an output is stored only for the duration of the generation. Once your generation completes (or fails), the uploaded source file is permanently deleted from our storage within 24 hours. We never use your photos to train AI models or share them with third parties.

2. Generated media — kept until you delete it

Your generated images and videos remain in your gallery until you delete them or close your account. You can delete individual items from your gallery at any time — deletion is immediate and irreversible.

Deleting a video removes the file and its prompt straight away. A bare record that a video was made (the time and what it cost us, with no content) stays for up to 3 days for our spending totals and is then removed as well.

3. What we collect

  • Account info: email address, hashed password, display name
  • Uploaded images: temporarily, solely to produce your requested output — deleted within 24 hours of completion
  • Generation history: preset, settings, output file reference — kept in your gallery until deleted
  • Payment data: handled by NowPayments (cryptocurrency). We record transaction IDs, amounts, and plan changes for billing and dispute resolution. We never see private keys or seed phrases.
  • Credit ledger: a running log of every credit grant and deduction, retained as a financial audit trail
  • Security log: login events, IP address, device info — retained for fraud and abuse investigation
  • Free-credit record: when free credits are claimed we note the network address, the anti-abuse cookie and the email domain (not the address itself), so the same person cannot claim them repeatedly. Kept for 180 days, even if the account is deleted
  • Usage metrics: anonymous request counts used for capacity planning only
  • Site analytics: Google Analytics counts visits, pages viewed, device type, rough location and actions such as signing up, making a video or buying credits. It receives a random account number, never your email, your prompts or your videos (see section 6)

4. What we never do

  • Train AI models on your uploaded photos or generated outputs
  • Share your content with third parties for any purpose
  • Use your generations in our marketing without explicit consent
  • Sell your personal data
  • Operate without 18+ age verification

5. Account deletion & data erasure

You can delete your account at any time from Settings → Account. Deletion is a two-stage process:

  • Immediately upon deletion: your account is anonymised (email, name, and password removed), your active session is terminated, and you lose access. No new charges can be made.
  • Within 90 days: all generated media files and any remaining uploaded photos are permanently deleted from our storage servers (Wasabi object storage). The 90-day window aligns with chargeback and fraud investigation requirements.
  • Retained for legal compliance: anonymised transaction records, credit ledger entries, and security log entries are kept as required by financial and fraud-prevention obligations. These records contain no personally identifiable information after anonymisation.

To request expedited erasure or for GDPR/CCPA inquiries, email [email protected].

6. Cookies & sessions

We use a single httpOnly session cookie (yh_sid) to keep you logged in. This cookie is not accessible to JavaScript and is not used for tracking.

When you sign up we also set one anti-abuse cookie (mf_dev), a random number that tells us a browser has already claimed the free credits. It is used only to stop the free credits being claimed over and over, never for advertising or to follow you around the web.

We use Google Analytics to understand how the site is used. It sets its own cookies (_ga) and its data is processed by Google. Google's advertising features are turned off: we do not use advertising pixels, ad targeting or remarketing, and we never sell your data. If you are in the EU, EEA, UK or Switzerland, these cookies stay off unless you press OK on the cookie notice. You can also block them with any browser privacy setting or extension, and the site works the same.

7. Adults-only platform

MakeFantasi is an 18+ adult platform. By using this service you confirm you are of legal age in your jurisdiction. We do not knowingly serve minors. If you believe a minor has accessed this service, please contact us immediately at [email protected].

8. Contact

Questions? Email [email protected] or use the contact form.