Privacy policy
Updated October 24, 2026
Account and service data
We process your username, password hash, verified email or linked identity, session/device cookies, uploaded photos, edit instructions, generated images, task state and payment/credit records to operate the service. Email codes verify an address. Device and network-derived signals help protect account rewards and prevent duplicate or abusive submissions.
External processing
Requested photos/instructions are sent to image-generation providers (including the configured primary image API and APImart fallback where applicable). Email verification uses Resend. Configured payments use Waffo and its payment partners; card handling occurs on their hosted checkout. Cloudflare/Turnstile provides security verification. These providers process data under their own terms. We do not promise that a provider never stores data or uses it for training unless independently established for the applicable service.
Google Analytics 4
We use Google Analytics 4 (measurement ID G-6K9CV7YS9K) to understand site use. It may use analytics cookies and process browser/device and network information. A separate fixed same-origin page loads the Google tag and receives only allowlisted page categories and generic titles. We exclude email, photos, prompts, query strings, order/task tokens and private route identifiers from those events, override the page referrer, and disable Google signals and ad personalization signals in this tag.
Cookies, access and deletion
Functional cookies keep sessions, device verification and OAuth flows working. Analytics cookies are distinct from functional cookies. You can block cookies in your browser, but some features may then stop working. Private tasks and results are shown only to the account that owns them, or, for older orders, to whoever holds the original private order link. Email feedback@likeuphoto.online to ask for a copy of, or deletion of, the photos and account data we store. Some transaction, security and audit records may need to be retained for legitimate operating or legal obligations; external providers control their own retention.