Privacy Policy

This policy explains exactly what AvatarForge collects, what happens to it, and what we deliberately never do. It describes the real behavior of this site — not generic boilerplate. If anything here is unclear, please contact us.

What we collect

We designed AvatarForge so that it collects as little as possible. Here is the complete list:

• Uploaded photos. A photo is uploaded only when you choose to generate an avatar from it. The image is processed in memory by our backend API, which forwards it over an encrypted connection to the AI image model that produces your avatar. Once your avatar is returned, the upload is not stored by the site — we keep no copy of it.
• Contact-form messages. If you use the contact form, we store the name, email address, topic and message you submit in our database so that we can read and reply to you.
• Theme preference. Whether you use light or dark mode is stored locally in your own browser. This never leaves your device.

That's all. There are no accounts — you never register, log in or give us a profile. We also do not currently run third-party analytics or advertising, so there are no tracking pixels or ad networks watching your visit.

How avatar generation works

When you generate from a photo, the flow is: your photo goes to our backend API, which merges your chosen style and customization options into a prompt and forwards the request to a managed AI image model; the model returns your avatar, which is then shown to you for download.

We want to be transparent about one point: the AI image model is operated by a third-party provider, and we cannot control that provider's internal processing or retention practices. If you are uncomfortable with a photo being transmitted to an AI service — even once, encrypted, and without storage on our side — you can simply use the generator in text-only mode, which creates fully fictional avatars without any photo upload. The tools work both ways; the choice is always yours.

Data retention

• Uploaded images are not persisted by us. They live only for the duration of a generation request.
• Contact messages are kept in our database until you ask us to delete them. Send us a deletion request and we will remove the message and its details.

Your rights

You can ask us for access to the data we hold about you (in practice: your contact messages), ask us to delete it, or object to our use of it. To exercise any of these, use the contact form and pick the "Privacy request" topic.

Depending on where you live, regulations such as the GDPR (EU/EEA) or the CCPA (California) may grant you rights along these lines. We handle such requests in the same spirit — access, deletion, objection — regardless of whether any specific registration or legal threshold formally applies to us. We will never ask you to create an account to exercise a right, because no account exists.

Children's privacy

AvatarForge is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has sent us a message through the contact form, tell us and we will delete it.

Security measures

• Encrypted transport: all traffic to and from the site, including photo uploads and generated results, travels over encrypted connections.
• No storage of uploads: photos sent for generation are never written to our database or file storage.
• Rate limiting: our API endpoints limit how often requests can be made, which reduces abuse surface, including on the contact form.

Changes to this policy

If our data practices change — for example, if we ever add analytics or start offering accounts — we will update this page and change the "Last updated" date above. Material changes will be described clearly, not buried.

Contact

Privacy questions, requests or complaints: use the contact form with the "Privacy request" topic. We usually reply within 2–3 business days.