Privacy policy

What we collect

We collect nothing that can identify you personally. The site runs zero analytics scripts, stores no user accounts, and keeps no logs of prompts, image generations, or IP addresses tied to individuals.

Server logs exist for 14 days solely to diagnose technical faults. They contain only anonymized request timestamps, status codes, and bandwidth totals. No visitor is linked to any entry. After 14 days the logs are deleted automatically.

Newsletter sign-ups are the single place where an email address is stored. That address lives in a self-hosted Mailtrain instance, is used only for product-update mailings, and can be removed instantly via the unsubscribe link. We publish the exact subscriber count—currently 1,847—on the homepage so the figure stays transparent.

Session data required to remember dark-mode preference or filter choices is held in short-lived browser storage that expires when the tab closes. Nothing crosses devices or persists beyond the visit.

Two facts make the policy concrete. First, the contact form discards your message and email the moment it is sent; we never retain copies. Second, we reject every request from advertising networks that want to drop tracking pixels. The absence of any persistent identifier is the reason the site can claim it collects no personal data.

That stance is deliberate. Most AI image tools log every generation and tie it to an account. We chose the opposite path. The data we hold cannot be sold, breached, or subpoenaed because it does not exist in identifiable form.

Cookies

Cookies on this site are limited to essential functions. The only persistent cookie stores your chosen comparison filters so the table reloads with your last settings. Session cookies handle login state and CSRF protection; both are deleted when the browser closes. No advertising, tracking, or analytics cookies are set. Google Analytics is deliberately not used.

The comparison table printed below therefore contains a single relevant column: “Cookies”. A green check means the tool sets only functional cookies required for its core features. A red cross means the tool deploys additional tracking, profiling or advertising cookies. That column is the only one that matters for this section.

Every other data column belongs to the separate sections listed at the top of the page.

Third parties

Third-party services appear in every AI-tool privacy policy on this site. Exactly zero tools publish a full list of subprocessors, data-sharing contracts, or the jurisdictions where user prompts are routed.

Some vendors name only Stripe and their cloud host. Others list OpenAI, Anthropic, or Google as model providers yet omit where the conversation logs are stored or for how long. No tool discloses whether it forwards prompts to additional analytics or moderation subcontractors.

The write-ups below therefore note only the third parties each vendor actually names in its published policy. Absence of detail is recorded as such. The ordering of those write-ups follows the same score used on the rest of the page: higher-ranked tools simply publish marginally clearer statements about the vendors they do admit to using.

Your rights

Your rights under data-protection law are limited on this site. Because we collect no personal data, run no user accounts, and retain nothing that identifies you, most standard rights simply do not apply.

You cannot request access to data we do not hold. You cannot ask for rectification or erasure of records that never existed. Portability rights, the right to object to processing, and the right to withdraw consent are likewise unavailable; there is no processing and no consent to withdraw.

Two narrow rights remain. First, you may object to any future use of your IP address for analytics if we ever enable that feature. Second, you can request confirmation that we hold no personal data about you. We will reply within 30 days stating that none is stored.

These rights exist because the site follows GDPR and CCPA principles even though it falls outside most of their scope. The privacy policy is deliberately short for this reason. No marketing emails are sent, no profiles are built, and no data is sold.

If you contact us to exercise a right, supply only the minimum information needed to verify you are the requester. We delete the inquiry itself after 90 days. No copies are kept in backups.

Residents of California, the EU, UK, and other jurisdictions with similar laws receive exactly the same treatment. The site makes no distinction by geography. Where local law grants additional rights not listed here, those rights remain unexercisable because the factual prerequisite—personal data in our possession—does not exist.

This section exists to state the boundary plainly. The absence of collection is not a loophole; it is the entire policy.