Privacy Policy

Last updated: October 26, 2026. This policy describes what Halloween AI Costume ("we") does with your data. The short version: your photos are never stored, and we collect as little as a costume site possibly can.

Photos you upload

Uploaded photos exist in your server request's memory only, for as long as it takes to generate your image. They are never written to disk by us, never used to train AI models by us, and never shown to other people. To generate your image, the photo is transmitted over an encrypted connection to the AI processing service used for that generation and processed solely to produce your result; the specific provider and its data-processing terms are named in this section before live AI generation is switched on. Generated images are sent straight back to your browser and are not stored by us either — download the ones you want to keep.

Email address

We ask for your email only when you buy credits. It is used (a) as your receipt and payment identifier through our payment partner, and (b) as the lookup key that binds credits to your browser. We do not send marketing emails.

Payments

Payments are processed by a third-party payment provider (Merchant of Record). Your card details go directly to them; we never see or store them.

Analytics

We use Google Analytics 4 to understand aggregate usage: page views and generation events (such as which costume preset was used). GA4 receives no photo content. Independently of GA4, our server keeps a technical event log to operate the service and reconcile payments: generation events (preset chosen, mode, provider, timing), preview-quota and credit-balance events keyed by the hashed email lookup key described above, and payment events (order ID, amount, status). This log contains no photo content.

Google sign-in

Generating an image requires a one-click Google sign-in. We receive your Google account name and email address, and use them only to identify your account, hold your free-preview and credit balance, and process payments. We never post anything to your Google account, and we do not receive your Google password. Signing in also keeps free previews away from bots — the quota is per account, not per browser.

Local storage & cookies

We set one signed cookie that keeps you signed in and holds your credit balance across page loads, and a browser-storage flag remembering that you confirmed the 18+ rule. We also briefly keep your in-progress request in your browser's local storage if you start a generation before signing in, so it can resume after you return. No advertising cookies, no cross-site tracking.

Children

The service is for adults 18+. Photos containing people may not include minors.

Contact

Questions or deletion requests: support@halloweenaicostume.com.