FreeArtGen is built on a no-account principle: we do not collect your name, email, or any personally identifying information. This policy explains what limited data we do handle.
What we collect
Every time you click Generate, we write one record to our database containing:
- A hashed IP address — your IP is passed through SHA-256 with a rotating salt before storage. The hash is not reversible; we cannot recover your original IP from it. It exists solely to enforce the per-hour rate limit.
- Your prompt text — stored to support NSFW pattern detection and cost reconciliation. It is not linked to any user identity.
- Generation metadata — aspect ratio, style choice, output status, and latency. No image or video bytes are stored on our infrastructure.
- Timestamp — used for rate-limit windowing and operational monitoring.
What we do not collect
- Name, email, or any account information
- Payment information (the Service is free)
- Device fingerprints, cookies for tracking, or cross-site identifiers
- The generated images or videos themselves
Third-party services
Fal AI — your prompt and generation parameters are sent to Fal AI’s API to run inference. Fal AI returns a CDN URL; we never receive the image bytes. Fal AI’s own privacy policy governs how they handle inference requests.
Plausible Analytics — we use a self-hosted instance of Plausible for aggregate traffic analytics. Plausible does not use cookies, does not track individuals across sites, and does not collect personal data. All data is anonymized at the time of collection.
Google AdSense — the Service displays ads served by Google AdSense. Google may use cookies and similar tracking technologies to serve personalized ads based on your browsing activity. You can opt out via Google’s ad settings.
Sentry — we use Sentry for error monitoring. Sentry may capture anonymized stack traces and request metadata when errors occur.
Data retention
Generation records (hashed IP, prompt, metadata) are retained for up to 90 days for operational purposes, then deleted in automated sweeps.
Your rights
Because we do not link any data to a user identity, we cannot look up, export, or delete records “for you” individually — there is no account to associate them with. If you are in the EU and have specific GDPR questions, contact us at the address below and we will respond within 30 days.
Children
The Service is not directed at children under 13. We do not knowingly collect data from children under 13. The Service includes NSFW filtering to prevent harmful content generation.
Changes to this policy
We may update this policy as the Service evolves. The “last updated” date above will reflect any revision. Continued use after a change constitutes acceptance.
Contact
Privacy questions or GDPR requests: see the About page for contact details.