← Back to Home

Privacy Policy

Last Updated: October 3, 2025

Fun With Faces ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at www.funwithfaces.com (the "Service").

By using the Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our Service.

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide when using our Service:

Information Type	What We Collect	Purpose
Account Information	Email address, password (encrypted), optional full name	Account creation, login, communication
Payment Information	Processed by Stripe (we don't store card details)	Processing purchases
Uploaded Photos	Images you upload to create posters	Poster creation, temporary processing
Poster Content	Text, styling choices, customizations	Creating your custom posters
Communications	Support emails, feedback, inquiries	Customer support, service improvement

1.2 Information Automatically Collected

When you access our Service, we automatically collect certain information:

• Log Data: IP address, browser type, operating system, pages visited, time spent
• Device Information: Device type, screen resolution, browser version
• Usage Data: Features used, posters created, downloads made
• Cookies: Session cookies, preference cookies (see Section 7)

1.3 Information We Do NOT Collect

We do NOT collect:

• Social Security Numbers or government IDs
• Biometric data or facial recognition data
• Precise geolocation data
• Information from children under 13 (see Section 10)
• Sensitive personal information (health, religion, political views)

2. How We Use Your Information

We use your information for the following purposes:

2.1 Service Provision

• Create and manage your account
• Process your uploaded photos to create posters
• Generate and deliver poster downloads
• Process payments and manage subscriptions
• Provide customer support

2.2 Service Improvement

• Analyze usage patterns to improve features
• Fix bugs and technical issues
• Develop new features
• Conduct research and analytics

2.3 Communication

• Send transactional emails (receipts, confirmations)
• Send service updates and important notices
• Respond to your inquiries
• Send marketing emails (with your consent - you can opt out)

2.4 Legal and Security

• Comply with legal obligations
• Enforce our Terms of Service
• Prevent fraud and abuse
• Protect our rights and property

3. How We Share Your Information

We do NOT sell your personal information to third parties.

We may share your information in the following limited circumstances:

3.1 Service Providers

We share information with trusted third-party service providers who help us operate our Service:

Service Provider	Purpose	Data Shared
Stripe	Payment processing	Email, payment information
AWS/Cloud Storage	File storage and hosting	Uploaded photos (temporary)
Email Service	Transactional emails	Email address, name
Analytics (Google Analytics)	Usage analytics	Anonymized usage data

All service providers are contractually obligated to protect your information and use it only for the specified purposes.

3.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Court orders or subpoenas
• Law enforcement requests
• Legal processes or government investigations
• Protection of our rights, property, or safety

3.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

3.4 With Your Consent

We may share your information for other purposes with your explicit consent.

4. Data Retention

4.1 Account Data

• Active Accounts: Retained as long as your account is active
• Deleted Accounts: Deleted within 30 days of account deletion request
• Inactive Accounts: Deleted after 2 years of inactivity

4.2 Uploaded Photos

• During Creation: Stored temporarily while you create your poster
• After Download: Deleted within 24 hours
• Session Data: Cleared when you log out or after 7 days

4.3 Transaction Records

• Payment Records: Retained for 7 years for tax and legal compliance
• Download History: Retained as long as your account is active

4.4 Backups

Backup copies may exist for up to 90 days after deletion for disaster recovery purposes.

5. Data Security

We implement industry-standard security measures to protect your information:

5.1 Technical Safeguards

• Encryption: All data transmitted using SSL/TLS encryption (HTTPS)
• Password Security: Passwords are hashed using bcrypt
• Secure Storage: Data stored on secure servers with access controls
• Regular Backups: Automated backups to prevent data loss

5.2 Organizational Safeguards

• Limited employee access to personal data (need-to-know basis)
• Regular security audits and updates
• Incident response procedures
• Employee training on data protection

5.3 Your Responsibility

You are responsible for:

• Keeping your password secure
• Not sharing your account credentials
• Logging out of shared devices
• Notifying us of any security breaches

6. Your Privacy Rights

Depending on your location, you may have the following rights:

6.1 Access and Portability

• Access: Request a copy of your personal data
• Portability: Receive your data in a structured, machine-readable format

6.2 Correction and Deletion

• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data

6.3 Control and Objection

• Opt-Out: Unsubscribe from marketing emails
• Object: Object to certain data processing activities
• Restrict: Request restriction of processing

6.4 How to Exercise Your Rights

To exercise any of these rights, contact us at:

• Email: privacy@funwithfaces.com
• Account Settings: Use the "Delete Account" or "Download Data" features

We will respond to your request within 30 days.

6.5 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we don't sell data)
• Right to deletion
• Right to non-discrimination for exercising your rights

6.6 European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access, rectification, erasure
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

7. Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files stored on your device that help us provide and improve our Service.

7.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for login, session management, security	Session or 30 days
Functional Cookies	Remember your preferences and settings	1 year
Analytics Cookies	Understand how you use our Service (Google Analytics)	2 years
Marketing Cookies	Track conversions from ads (with your consent)	90 days

7.3 Managing Cookies

You can control cookies through:

• Browser Settings: Most browsers allow you to refuse or delete cookies
• Opt-Out Tools: Google Analytics opt-out: https://tools.google.com/dlpage/gaoptout
• Do Not Track: We respect Do Not Track signals

Note: Disabling essential cookies may affect Service functionality.

8. Third-Party Links

Our Service may contain links to third-party websites (e.g., Stripe, social media). We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by the European Commission
• Privacy Shield certification (where applicable)
• Adequacy decisions by relevant authorities

10. Children's Privacy

Our Service is not intended for children under 13.

• We do not knowingly collect information from children under 13
• If we discover we have collected such information, we will delete it immediately
• Parents: If you believe your child has provided us with personal information, contact us at privacy@funwithfaces.com

For users aged 13-18, parental consent may be required depending on your jurisdiction.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date
• Sending an email notification for material changes

Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Data Breach Notification

In the event of a data breach that affects your personal information, we will:

• Notify you within 72 hours of discovering the breach
• Describe the nature of the breach
• Explain the potential consequences
• Describe the measures we are taking to address the breach
• Provide recommendations for protecting yourself

13. Contact Us

14. Your Consent

By using our Service, you consent to this Privacy Policy and agree to its terms. If you do not agree, please do not use our Service.