Privacy Policy
Your privacy is important to us. Learn how we protect and handle your data. ๐ก๏ธ
Last updated: August 7, 2026
At Photo to Sticker, we are committed to protecting your privacy and ensuring your data is handled securely and transparently. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data.
Photo to Sticker is an independent service operated by an individual (not a company). The operator acts as the data controller for the personal data described here. For any privacy request, contact support@phototosticker.net.
๐ Information We Collect
1.1 Information You Provide
- Account Information: We use Google sign-in (Google OAuth) as the only login method. When you sign in, we receive your Google account email address and name. We do not collect or store a password.
- Photos: Images you upload to create stickers
- Payment Information: Processed securely by our payment processor and merchant of record, Waffo. We do not receive or store full card numbers.
- Communications: When you use our contact form, your name, email, subject, and message are submitted through Formspree (our form-delivery provider) and reach us by email. We also use Resend to send transactional and newsletter emails.
1.2 Automatically Collected Information
- Usage Data: Pages visited, features used, time spent on platform
- Device Information: Browser type, device type, IP address, operating system
- Cookies: We use cookies to enhance your experience (see our Cookie Policy)
๐ฏ How We Use Your Information
โ Service Delivery: To process your images and generate stickers using AI technology
โ Account Management: To create and manage your account, authentication, and preferences
โ Payment Processing: To handle subscriptions, credits, and billing
โ Communication: To send service updates, newsletters, and respond to inquiries
โ Improvement: To analyze usage patterns and improve our platform
โ Security: To detect fraud, prevent abuse, and protect our users
โ Legal Compliance: To comply with applicable laws and regulations
๐ Image Privacy & Security
๐ก๏ธ Your Images Are Protected
- Encrypted Upload: All images are encrypted during upload using TLS/SSL
- Secure Storage: Images are stored in encrypted cloud storage (Cloudflare R2)
- Automatic Deletion: Original images are automatically deleted 1 hour after processing
- Result Expiration: Generated stickers expire based on your plan โ 10 minutes for Free, and 6 days for Pro.
- Thumbnails: A small thumbnail of each result is kept in your edit history (stored on Cloudflare R2) so you can revisit past generations. It remains until you delete your history or contact support to have your history and thumbnails deleted.
- No selling, limited sharing: We never sell your images. We share them only with the service providers needed to generate, store, and deliver your stickers โ see โData Sharing & Third Partiesโ below.
- Your rights in your content: You keep the rights you already have in the photos you upload. How you may use the AI-generated stickers depends on your plan (Free is for personal use; Pro includes a commercial-use license), subject to the Terms and applicable law and third-party service terms.
๐ค Data Sharing & Third Parties
We may share your information with:
- Authentication: Google (Google OAuth) to sign you in and verify your identity
- Payment Processor: Waffo (our payment processor and merchant of record) for subscription and payment processing
- Cloud Services: Cloudflare R2 for secure image storage
- AI Providers: Your uploaded photos are sent to third-party AI models to generate your stickers. We use Google's Gemini image-generation models (e.g. Gemini 2.5 Flash Image), accessed via OpenRouter and compatible AI gateways over secure APIs. Images are used only to produce your requested sticker and are not used to train these models by us.
- Content Moderation: To keep the service safe and comply with our Acceptable Use Policy, both your uploaded photo and the generated result are automatically screened for prohibited content by Google's Gemini vision model before the result is stored or shown to you. This is an automated check; no human reviews your images as part of moderation.
- Contact & Email: Formspree (contact form delivery) and Resend (transactional and newsletter email)
- Analytics: Microsoft Clarity, Ahrefs Analytics, and Google Tag Manager (which may load the analytics tags above). These help us understand usage and improve the product. Non-essential analytics load only after you consent โ see our Cookie Policy and the โCookie settingsโ link in the footer.
- Advertising: We may use Google AdSense and Google's advertising partners to display and measure ads. Advertising cookies and personalized ads are used only with your consent, which you can change or withdraw at any time via โCookie settings.โ
- Legal Requirements: When required by law or to protect our rights
โ ๏ธ Important: We never sell your personal data or images to third parties. All third-party services are contractually obligated to protect your data.
๐๏ธ What We Process, Why, and For How Long
| Data | Purpose | Recipients / Processors | Retention |
|---|---|---|---|
| Google account profile | Sign-in & account management | Google OAuth, our database | Until you delete your account |
| Uploaded photos | Generate your sticker | Gemini via OpenRouter/AI gateways, Cloudflare R2 | Deleted 1 hour after processing |
| Generated stickers | Download & history | Cloudflare R2 | Free: 10 minutes; Pro: 6 days |
| Uploaded photo & generated result | Automated safety moderation | Google Gemini vision | Screened in-transit; not retained by us for moderation beyond the windows above |
| History thumbnails | Show your edit history | Cloudflare R2 | Until you delete history or contact support |
| Contact-form messages | Reply to your inquiry | Formspree, email (Resend) | Kept only as long as needed to handle your request |
| Payment & order data | Billing, tax, refunds | Waffo | As required by order & tax law |
| Analytics data | Product & performance analytics | Microsoft Clarity, Ahrefs, Google Tag Manager | With consent; per each provider's policy |
| Advertising data | Ad display & measurement | Google AdSense & ad partners | With consent; managed via Cookie settings |
The data controller is the individual developer who operates Photo to Sticker, based in China. Legal basis depends on the processing (performance of a contract, legitimate interests, legal obligation, or your consent). This Privacy Policy and our processing of your personal data are governed by the laws of the People's Republic of China. For any privacy request, contact support@phototosticker.net.
Third-party policies: Google, Waffo, Cloudflare, OpenRouter, Formspree, Resend, Microsoft Clarity, Ahrefs. For how Google handles data from our sign-in, AI, and advertising integrations, see How Google uses data when you use our partners' sites or apps.
๐ International transfers & retention: The service is operated from China and the third parties above process data on servers in the United States, the EU, and other regions, so your data may be transferred across borders. We delete images from our own storage on the schedule shown in the table, but once data is processed by a third party (for example, an AI or moderation request), its retention is governed by that provider's own policy โ so we cannot guarantee that every third party erases a copy on the same timetable we do.
๐ค Your Rights
โ Access: Request a copy of your personal data
โ Correction: Update or correct inaccurate information
โ Deletion: Request deletion of your account and data
โ Portability: Export your data in a machine-readable format
โ Objection: Object to certain data processing activities
โ Withdrawal: Withdraw consent for analytics, advertising, or marketing at any time (use โCookie settingsโ in the footer for tracking consent)
โ Complaint: Lodge a complaint with your local data-protection supervisory authority
๐ง To exercise your rights: Use our contact form or visit your account settings.
๐ International Data Transfers
Our services are hosted on cloud infrastructure that may be located in different countries. We ensure that any international data transfers comply with applicable data protection laws, including GDPR for EU users and CCPA for California residents. We use standard contractual clauses and other appropriate safeguards.
๐ Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through a notice on our platform. Continued use of our services after changes constitutes acceptance of the updated policy.
๐ง Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please don't hesitate to reach out:
๐ฌ Contact: Contact Form
๐ Website: phototosticker.net