Privacy Policy
This policy explains how Pictwirl at pictwirl.com handles personal information for AI portraits, face swaps and Second World posters. Wangjinyu operates the service as an individual in mainland China. The contact details below identify the person responsible for our processing; Pictwirl is the service name, not a claim of company incorporation.
- Operator and data controller (individual)
- Wangjinyu
- Correspondence address
- 重庆市九龙坡区和泓四季A区
Area A, Hehong Siji, Jiulongpo District, Chongqing, China - Privacy and customer support
- wjinyu141@gmail.com
1. Information we process
Accounts: name, email, account ID and verification status; a password hash for email/password accounts; and session records, IP address and browser information used for authentication. Google sign-in supplies the profile, email, picture and provider identifier you authorize. Our authentication system may store OAuth tokens returned by Google. We do not receive your Google password or request access to Gmail, Drive or contacts.
Creation: uploaded photos (including faces and any embedded metadata), prompts, selected tool/style, generated images, task identifiers, creation time and account ownership. Upload only material you may use and obtain permission from people depicted. We do not use uploads to build our own facial-identification database or to train our own models. The image provider has its own processing and retention practices.
Technical and support data: request and security/rate-limit information, IP address, browser user agent, and messages or attachments you choose to email us. We do not request government identity documents or precise GPS location for using the studio.
2. Purposes and legal grounds
We use necessary account and creation data to provide the service you request (contract performance); security data to prevent abuse and protect accounts (legitimate interests, where applicable); support messages to answer requests (contract performance or legitimate interests); and information required to meet legal obligations. Where consent is required for a particular processing activity, we seek it and you may withdraw it. We do not make automated decisions producing legal or similarly significant effects about you.
3. Recipients and service providers
Cloudflare operates the website, D1 account/task database and private R2 poster storage. Google handles Google authentication. Mouxihub (api.mouxihub.com) receives prompts and images needed for generation and returns results; downstream model and result-hosting providers may also process them. Loading an externally hosted result can disclose your IP/browser information to that host. Resend sends account verification/reset messages only when email delivery is enabled; it is not currently configured. The privacy/support inbox is hosted by Gmail. Waffo’s role is described below. Providers may act as processors or independent controllers for their own activities. We may disclose data when legally required, to protect rights, with your authorization, or in a business transfer with appropriate notice and safeguards.
Service providers and their policies
4. Payments and Waffo Pancake
Checkout is currently disabled: Pictwirl does not currently accept payments or store paid transaction records. When checkout is activated, Waffo Pancake is the intended Merchant of Record/payment provider. Its checkout will collect the billing, payment and fraud-prevention information needed to process purchases, receipts, refunds and tax obligations under its own policy. Pictwirl will receive only information needed to link a purchase to your account and provide entitlements, such as an order identifier, product, amount, currency and payment/refund status. Full card numbers and card security codes are not collected or stored by Pictwirl. We will update this policy and transaction-retention details before enabling checkout.
Necessary cookies maintain login, OAuth security and task access. Login sessions last up to 7 days, subject to renewal or revocation; verification links expire after 1 hour. Local storage saves your theme preference and up to 24 recent creation records per account on the device, including result links and task-access tokens. You can clear these using the history controls or browser settings; disabling necessary cookies prevents login and protected functions. We currently use no advertising pixels or analytics cookies and send no marketing campaigns. Clearing browser history does not delete server records, downloaded files or provider-held data.
6. Storage and retention
Portrait and face-swap input photos are processed in application memory and forwarded for generation; our application does not persist those input files. Second World temporarily stores an encrypted crop of the original upper half in private R2; after composition it is replaced by the encrypted finished poster. Access expires 24 hours after submission. Expired image contents are removed on access or by the hourly cleanup, in batches of up to 100; a backlog can delay physical removal. An expiry marker is eligible for removal after 7 days. Browser history does not extend these deadlines.
Account, OAuth and task-ownership metadata remain while the account is maintained and until a verified deletion request is processed; there is currently no automatic age-based purge of those records. Expired session records may also remain until cleanup or account deletion. We process verified deletion requests within 30 calendar days, unless applicable law requires a shorter period or permits an explained extension or specific legal retention. We retain support correspondence for up to 12 months after a request is closed, unless a dispute or legal obligation requires longer retention. Provider records, their backups and downloaded files follow their own retention rules; contact us for help requesting provider-side deletion.
7. Security and incidents
We use HTTPS, password hashing, account-based access checks, signed task-access tokens and AES-GCM encryption for stored Second World images. These measures do not eliminate every risk. We will investigate incidents and notify affected people and authorities as applicable law requires. Where GDPR Article 33 applies, a reportable breach is notified to the authority without undue delay and, where feasible, within 72 hours of awareness; affected people are notified without undue delay when legally required.
8. International processing
The operator is in mainland China. Cloudflare’s global infrastructure, Google, the image provider and other suppliers may process information outside your country, including the United States and other locations determined by those providers. We do not promise storage in a single country. Applicable transfer requirements must be observed, using appropriate contractual or other lawful safeguards where required. Contact us for information about a particular transfer; this policy does not assert that every provider has signed bespoke safeguards with us.
9. Your choices and privacy rights
Depending on applicable law, you may request access, correction, deletion, a portable copy, restriction, objection or withdrawal of consent, and complain to a competent privacy authority. We do not sell personal information or share it for cross-context behavioral advertising. Email the contact above to exercise rights or close your account; we verify only what is needed to protect it and respond within 30 calendar days, subject to applicable shorter periods or lawful extensions. You can revoke Google access in your Google account; this does not itself delete your Pictwirl account or information already processed. We do not discriminate for exercising applicable privacy rights.
10. Children and sensitive content
Pictwirl is intended for adults aged 18 or older. Do not create an account or upload photos if you are under 18. Do not upload identity documents, private intimate images or other people’s images without appropriate rights and permission. If you believe a child’s information has been submitted, email us so we can investigate and arrange deletion where appropriate.
11. Policy changes and contact
We update the date above when this policy changes. For material changes to our practices, we aim to give at least 15 days’ advance notice through a prominent website notice or account email, unless an urgent security or legal requirement requires earlier action. If fresh consent is required, continued use alone will not replace it. Send privacy, account-deletion or support questions to the email listed above. Third-party sites and payment services have their own policies.