Privacy Policy
Effective date: October 12, 2026
This policy explains what data GirlFilter (https://girlfilter.com, "we", "us") processes when you use the site, why, and what choices you have. We have tried to write it plainly.
GirlFilter is operated by an independent developer under the name "GirlFilter", who is responsible for the processing described in this policy (the data controller).
You can reach us at support@girlfilter.com.
Summary
- You upload one photo. Our AI makes a female version of the same person. You must be 18 or older.
- Resizing and face detection run in your browser. The resize step removes EXIF and GPS data from your photo.
- To generate, you must sign in with Google. We receive your Google account ID, email and name. We never get your password.
- Your original photo is stored temporarily in Cloudflare R2 and deleted by us as soon as the job ends, whether it succeeds, fails or times out.
- Result images are kept for 30 days so you can view, download or delete them from your account page. Then they are deleted automatically.
- Your photos and results are not used to train any model of ours. We have no models of our own. Third-party providers follow their own policies.
- Payments are handled by Creem. We never see your card number.
- Analytics (Google Analytics 4) is off until you click Accept.
1. Data we process
Photos you upload. The photo goes through these steps.
- In your browser. Your device shrinks the photo to a longest side of 1024 pixels and converts it to JPEG. This step removes EXIF and GPS information. Face detection also runs in your browser. To do this, your browser downloads model files from cdn.jsdelivr.net and storage.googleapis.com. Those servers receive standard request information such as your IP address and browser details, like any site you load files from. They do not receive your photo.
- If you are not signed in. If you click generate before signing in, the photo is kept in your tab's sessionStorage (
gf:pending). After you come back from Google sign-in, it is restored and removed right away. - Safety check. The shrunken photo is sent through our server (running on Cloudflare Workers) to kie.ai, which passes it to a Google Gemini model. The model checks whether the photo shows exactly one person, whether that person looks like an adult, whether there is nudity or sexual content, and whether it is a real photo of a person. If the photo fails, we refuse it and do not charge a credit.
- Generation. We store the photo temporarily in our Cloudflare R2 storage and create a private one-time link that only kie.ai can use. The link is valid for 15 minutes. kie.ai fetches the photo with it and hands it to an image model: ByteDance Seedream for the girl filter's Natural style, or Google Nano Banana for its Feminine style and for our other filters. When the job ends (success, failure or timeout), we delete our copy of the original photo. A background cleanup runs every 10 minutes to remove any leftover files.
- Result image. The result is stored in Cloudflare R2. If you are signed in, you can view, download or delete it on your account page for 30 days. After 30 days it is deleted automatically.
Face data. We do not use your photo to identify you. We do not build face templates and we do not keep face geometry data. See section 7.
Account data. Generating requires Google sign-in. Google shares your Google account ID, email address and name with us. We never receive your Google password. We store these in our database (Cloudflare D1).
Credits and generation records. Our database also holds your credit history, your orders, and a record of each generation: time, style, status and the result file name. These records do not contain images. Sessions are stored only as hashes.
Signup bonus hash. New accounts get 2 free credits. If you delete your account and sign up again with the same Google account, you do not get the bonus again. To enforce this, we keep a salted hash of your Google account ID. It does not include your email. We keep it after you delete your account.
Purchases. Payments are processed by Creem, which acts as merchant of record and handles your card details, tax and receipts. Creem tells us the order ID, product, amount paid, currency and the email used at checkout. We use this to add credits and handle refunds. We never receive your card number.
Cookies and local storage. We use a few strictly necessary cookies and browser storage items to keep you signed in, protect sign-in, hold your photo in the tab while you sign in, and enforce the free daily limit (gf_device). Analytics cookies are set only with your consent. The full list, with lifetimes, is in our cookie policy.
Abuse-prevention data. Free use is limited per day. To enforce this we count free images per account, per browser and per network. For the browser we set a random device ID in a cookie (gf_device, 1 year). For the network we store a salted hash of your IP address, never the address itself. These counters are stored in Cloudflare KV and expire after about 25 hours. We also keep a site-wide daily spending counter, which contains no personal data.
Analytics. We use Google Analytics 4 with Consent Mode. Analytics storage is denied by default. It is only turned on after you click Accept. You can change your choice at any time with "Cookie settings" in the footer. Analytics events do not contain photos.
Technical data. Our hosting provider, Cloudflare, processes request data such as IP addresses and browser details to deliver the site and protect it from attacks. Cloudflare Workers logs record request metadata. Our code does not write photos or request bodies to those logs.
Cloudflare keeps Workers logs for a limited period set by Cloudflare. Google Analytics data is kept for 2 months.
2. Why we process it
- To generate the image you ask for (photo).
- To check that the photo is safe and appears to show an adult (photo).
- To run your account, add and refund credits, and keep accounting records (account data, orders).
- To let you view, download and delete your results (result images, generation records).
- To stop repeat sign-up bonuses and other abuse, and to control costs (signup bonus hash, daily counters).
- To understand and improve the site (analytics, only if you accept).
- To run and secure the site (technical data).
3. Third parties and subprocessors
| Provider | What it does | Data involved |
|---|---|---|
| Cloudflare | Hosting (Workers), R2 file storage, D1 database, KV counters | Request data, photos and results in storage, account and order records, counters |
| Google (Sign-In) | Lets you sign in | Google account ID, email, name |
| Creem | Payment processing, merchant of record | Checkout details you give Creem, order and refund records |
| kie.ai | AI API service that receives the safety check and generation requests | Shrunken photo |
| Google (Gemini model, via kie.ai) | Safety check | Shrunken photo |
| Google (Nano Banana, via kie.ai) | Image generation: Feminine style and other filters | Shrunken photo |
| ByteDance (Seedream, via kie.ai) | Image generation, Natural style | Shrunken photo |
| cdn.jsdelivr.net, storage.googleapis.com | Serve face detection model files to your browser | Standard request data (no photo) |
| Google Analytics 4 (only after you accept) | Usage analytics | Page views, event names, device and approximate location |
We do not control how long these providers keep request content. Their own policies apply. To be open about what we know: kie.ai's public policy does not say how long it keeps the content of API requests. We cannot confirm it either. If that matters to you, please don't upload a photo.
Their own policies apply:
We don't sell your personal data, and we don't share it for advertising.
4. Retention
| Data | How long |
|---|---|
| Original photo (our R2 copy) | Deleted when the job ends. Leftovers are cleaned up every 10 minutes. |
| One-time private link for kie.ai | Valid for 15 minutes |
| Photo in sessionStorage while signing in | Removed as soon as it is restored |
| Result image | 30 days, then deleted automatically. You can delete it earlier. |
| Daily generation counter | About 25 hours in Cloudflare KV |
| Site-wide spending counter | No personal data |
| Account, credits, generation records and result images | Until you delete your account. Deleting your account removes them right away |
| Order records | Kept for tax and accounting after account deletion, with the link to your account removed |
| Signup bonus hash | Kept after account deletion |
| Third-party providers | Per their own policies |
5. Your choices
- Delete a result on your account page at any time.
- Delete your account from the account page. This removes your account, sessions, credits, generation records and result images right away. Order records are kept only in de-identified form for tax and accounting. A salted hash of your Google account ID is kept so the sign-up bonus is not given twice.
- Decline analytics with the cookie banner, or change your choice later via "Cookie settings" in the footer.
- Clear your browser's site data to remove local storage items.
- Contact us at support@girlfilter.com with privacy questions. Depending on where you live, you may have rights to access, correct, delete or object to processing of your personal data.
6. Children
GirlFilter is for adults 18 and over only. Every photo goes through an automated check, and photos that look like a minor, or where age is unclear, are refused. The check is automated and may make mistakes. If you find a photo of a minor on or submitted to the service, contact support@girlfilter.com.
7. Biometric data
Some laws treat face geometry as biometric data, for example the Illinois Biometric Information Privacy Act (BIPA) and similar US state laws, and the GDPR, where biometric data used to identify a person is a special category of data.
We don't use your photo to identify you or to recognize you across visits. We don't build face templates and we don't keep face geometry data. Face detection runs in your browser. Our database holds no images and nothing that can be used to recognize your face. We don't sell, lease, trade or otherwise profit from biometric data.
8. International transfers
Our providers (Cloudflare, kie.ai, Google, ByteDance, Creem) may process data in countries other than yours, including the United States. Data protection laws there may differ from those in your country.
9. Security
We use HTTPS, store session tokens only as hashes, delete original photos when a job ends, and keep result images for a limited time. No system is perfectly secure, and we can't guarantee absolute security.
10. Changes to this policy
We may update this policy as the site changes. We will post the new version here and update the effective date. If a change materially affects how we handle your photos, we will make it clear on the site.
11. Contact
Questions about this policy or your data: support@girlfilter.com. To report misuse or a photo of a minor: support@girlfilter.com.