Privacy and Cookies Policy

1. Information we collect to provide face swaps

The Service replaces a face in a photo, GIF, or video you choose. We collect the media and the technical details needed to run that job and to enforce the free-trial limit.

Uploaded images and generated results

Choosing a file creates a preview in your browser. It is not uploaded just because you selected it. Detect faces and Generate send the selected media through our server to the processing provider (Crun) so the face swap can run. We do not use your uploads or generated results to train GetFaceSwap models. We do not extract, sell, or share biometric templates. Temporary upload and result links can be opened by anyone who has the link. Do not upload confidential material.

Retention and deletion

Upload references expire for new jobs after 55 minutes. Job results on this Site stay available for at most 24 hours, and a provider link may expire sooner. Expired upload references and stored result links are removed during later upload activity. Account records, orders, and the credit ledger stay while the account exists and as needed to resolve a billing dispute. Email support@getfaceswap.com to ask us to delete the account data we control. That request does not instantly erase every copy the processing provider already received. We do not promise immediate deletion from every provider system.

Log information

Our servers may record the IP address, date and time, browser type, and the pages or API calls involved in a request. A hashed form of the IP is stored with free-trial jobs. We use these logs to run the Service, investigate abuse, and apply the daily free-trial limit.

2. Information we collect on the Site

Accounts and Google sign-in

You can use the studio as a guest inside the free-trial limits. An account is required to buy credits. If you register with email, we store the email address and a password hash, plus sign-in sessions. If you continue with Google, Google gives this Site an ID token. We check that token with Google and store the verified email and Google account identifier. We do not receive your Google password.

Payments

Paid credit packs are one-time purchases. Checkout continues to MoneyGo. Card numbers are entered on MoneyGo, not on this Site. We store the order: product, amount, status, and a payment reference. We do not store a full card number.

MoneyGo Risk can be turned on after a one-time allowlist of existing verified accounts. While it is on, the browser loads MoneyGo’s Risk SDK from https://moneygo.ai/risk-sdk/v1/sdk.js. That script reads the page address, including advertising parameters that are already in the link, the referring page, and the browser language, and it stores an opaque visitor credential in its own cookie or browser storage. It does not receive your password or card number. After a verified sign-in, our server sends the email on that session, not an email typed into the page, with the current credential so MoneyGo can associate the visitor with the account. The credential is not a login and it does not prove that a payment succeeded. The MoneyGo secret stays on the server. If the script is blocked, times out, or has no credential, checkout continues without it. New accounts are not added to the allowlist automatically. Signing out ends the GetFaceSwap session even if the SDK credential is still in the browser; the next account is synchronized before a payment is linked to a credential.

Volunteered

If you email support, we receive the address you write from and whatever you include in the message. Do not send passwords, API keys, or sensitive media.

3. How we share information

We share information with companies that run the Service:

• The processing provider receives the media for the job you start.
• Cloudflare hosts the Site and API and may process network data. If a security check is turned on, Cloudflare Turnstile processes technical information about the browser, as described in Cloudflare’s privacy policy.
• Google receives the sign-in check when you use Google, and the Site loads fonts from Google Fonts.
• MoneyGo receives the checkout and payment details needed to charge a pack. When MoneyGo Risk is on, MoneyGo also receives the visitor credential and, after you sign in, the verified account email. The one-time allowlist, if we send it, contains existing verified emails and not IP addresses.

We may also share information if the law requires it. We do not sell personal information, and we do not use uploads for advertising.

4. Cookies and the free-trial device id

Cookies are small files stored on your device. We use them to keep you signed in and to apply the free-trial limit. We do not use them to advertise, and we do not use them to follow you across other websites.

• Sign-in cookies are HttpOnly and tie the session to your account.
• The free trial is 1 photo per UTC day (GIF counts as a photo). Video requires paid credits. To count that trial, we store a random device id in a gfs_device cookie and in local storage, and we combine it with a hash of the IP address. A signed-in account shares that day’s count, so another login on the same browser and network does not add free uses.
• A guest studio cookie associates jobs with the browser.
• When MoneyGo Risk is on, MoneyGo’s script stores its own visitor credential. That credential is separate from the GetFaceSwap sign-in cookie. Signing out clears the sign-in cookie. It does not delete the MoneyGo credential.

You can refuse cookies in the browser. Sign-in, job recovery, and the free-trial limit may then stop working as intended.

5. Your choices

You can use the studio without an account until the free trial for the day is used up. You can sign out, and you can email us to ask for access, correction, or deletion of the account data we hold. Closing the page stops local polling. It does not cancel a job the provider has already accepted.

6. Third parties

Google, Cloudflare, MoneyGo, and the processing provider process information as described above. Links to other sites, including guide pages about other products, leave this policy. You use those sites at your own risk.

7. Information security

We take measures to limit unauthorized access, alteration, or disclosure of the data we store, including hashed passwords and HttpOnly session cookies. No method of transmission or storage is perfectly secure.

8. International transfers

GetFaceSwap is registered at 500 Westover Dr, Sanford, NC 27330, USA. Cloudflare, Google, MoneyGo, and the processing provider may still process information in other countries. This policy does not claim that every copy of a file stays in one country.

9. Your rights

Depending on where you live, you may have the right to access, correct, or delete personal information we hold, and to object to or limit some processing. Email support@getfaceswap.com to make a request. We may need to keep an order record where the law or a payment dispute requires it.

10. Changes

We may update this policy by posting a new version on the Site. The date at the top of the page will change when we do.

11. Contact

Questions about this policy: support@getfaceswap.com. The Terms and Conditions cover credits, refunds, and acceptable use.

• Operator: GetFaceSwap
• Registered address: 500 Westover Dr, Sanford, NC 27330, USA
• Contact: support@getfaceswap.com
• Payment processor: MoneyGo