Privacy Policy
Last updated:
This policy explains what bringphotosback.com collects, why, who processes it and what rights you have. The short version: your photos are used only to produce your results, they are deleted after 30 days, we never use them to train AI models, and we do not sell personal data.
The data controller is the operator of bringphotosback.com. For anything in this policy, including any request about your own data, write to [email protected].
What we collect
Photos you upload. Processed to produce the restoration, colorization, sharpening or animation you asked for, and nothing else. They are held in private storage - not publicly listed, not indexable - for up to 30 days so that you can download your results, then deleted automatically along with the results. You can have them removed sooner: write to support@ and we delete them.
Your email address, if you buy generations or ask for a sign-in link. It identifies your account, carries the sign-in links you request, and delivers your receipts. We do not send marketing email.
Payment data. Payments run through Stripe. Your card details are entered on Stripe’s own checkout page - we never see them and never store them. What reaches us is the fact of the purchase: which pack, the amount, the date, and the email address you paid with.
Technical data. A hashed identifier derived from your IP address and browser characteristics, used to enforce the free preview limit and to keep automated abuse off the service. Upload forms are protected by Cloudflare Turnstile. This data exists for security and capacity, not for profiling.
Referral and campaign marks. If you arrive through a partner link or one of our own adverts, first-party cookies record which link and which advert it was, so that a later purchase can be credited to the right one. They hold short codes - a partner name, a campaign name, the name of the image used in an advert - stored by your own browser under our domain. They are not passed to any third party and are not used to track you anywhere else.
Analytics and advertising measurement, only if you agree. If you choose Accept on our cookie banner, we load two things that we do not load otherwise:
- PostHog, our product analytics, hosted in the European Union. It records which pages are opened, which buttons are used, and where people give up - so that we can fix the places where they do. It does not read your photos.
- The Meta pixel, which tells Meta that an advert of ours led to a visit or a purchase. This is how we find out which advert is worth paying for.
If you choose Reject, neither is loaded, no identifier is stored on your device for either purpose, and nothing about you is sent to Meta. We still count visits and purchases, but on our own servers, without cookies and without an identifier that survives the day - a total, with nobody in it.
Cookies are covered in full, one row per cookie, in our Cookie Policy.
Legal bases
Where the GDPR or UK GDPR applies: processing your photos, your email address and your purchase record is necessary to perform the contract you enter when you use the service. The technical data and the abuse controls rest on our legitimate interest in keeping the service available and paid work protected.
Analytics and advertising measurement rest on your consent, and on nothing else. That is why they are switched off until you say otherwise, and why withdrawing is a single click - see Your cookie choice below.
Who processes it
We use a small number of processors, each for one job:
| Processor | Purpose | Where |
|---|---|---|
| Cloudflare | Hosting, file storage, security, cookieless analytics | Global edge network |
| fal.ai | AI processing of the photo you upload | United States |
| xAI, via fal.ai | AI processing for photo animation | United States |
| Resend | Sending sign-in links and receipts | United States |
| Stripe | Payment processing | United States and EU |
| PostHog | Product analytics - which pages are used and where people give up | European Union (EU cloud) |
| Meta | Advertising measurement - only if you accept, never otherwise | United States and EU |
No processor other than the AI ones ever receives a photo. PostHog and Meta receive events - “a pricing page was opened”, “a purchase of this value happened” - and never an image, never a file, never the contents of anything you upload.
Photos are transferred to the AI processors over an encrypted connection, processed automatically, and are not retained by them beyond processing. No processor is permitted to use your photos to train AI models.
International transfers. Several of these processors are based in the United States, so personal data may be transferred outside the EEA and the UK. Those transfers are made under the European Commission’s Standard Contractual Clauses, and under the UK International Data Transfer Addendum where the UK GDPR applies, together with the technical measures described above.
Your cookie choice
The banner you saw on your first visit records one of two answers, and keeps it for 12 months:
- Accept - the analytics and advertising measurement described above are switched on.
- Reject - they are not loaded at all. Not loaded and silent: the code is never fetched, so there is nothing on the page that could send anything.
Changing your mind takes one click, at any time. Cookie settings at the bottom of every page clears the answer, removes what was stored under it, and asks again. Refusing is exactly as easy as agreeing, and there is no third option that quietly means yes.
Everything else on this site works identically either way. Nothing is withheld, degraded or nagged about because of the answer you give.
How long we keep it
| Data | Retention |
|---|---|
| Uploaded photos and generated results | 30 days, then deleted automatically - sooner on request |
| Account: email, balance, purchase record | Until you ask us to delete it |
| Technical and abuse-control data | Short-lived, and held only in hashed form |
| Analytics events (PostHog) | Up to 7 years in our analytics account - the retention our plan applies. They record which pages were opened and which buttons used, never your name and never your photos; and for a visit made without consent, no identifier in them outlives the day. |
| Your cookie answer | 12 months, then you are asked again |
Records we are legally required to keep for accounting purposes are kept for as long as that obligation lasts, and for nothing else.
What we never do
- We never use your photos or results to train AI models.
- We never sell personal data. Nobody pays us for it, and nobody ever has.
- We never send an advertising network anything about you unless you have accepted - and never a photo, in any case.
- We never publish your photos or show them to anyone else.
- We never send marketing email unless you ask for it.
Your rights
You can ask us to:
- give you a copy of the data we hold about you (access);
- correct anything inaccurate;
- delete your data;
- object to or restrict processing;
- send you your data in a portable form.
Write to [email protected] from the address concerned and we answer within one month. If you are in the EEA or the UK you may also complain to your national data protection authority.
If you are a California resident, the CCPA and CPRA rights to know, delete, correct and opt out apply to you. We do not sell personal information and we do not offer financial incentives in exchange for data.
One thing does need naming plainly rather than hiding behind a definition. If you choose Accept, the Meta pixel described above sends Meta the fact that you visited or bought - and under the CPRA, measuring adverts across sites in that way can count as sharing for cross-context behavioural advertising. So: choosing Reject, or using Cookie settings at the bottom of any page, is the opt-out, and it takes one click. We honour the Global Privacy Control signal the same way. If you have never chosen Accept, nothing has been shared and there is nothing to withdraw.
Children
The service is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has sent us personal data, write to support@ and we delete it.
Changes
If this policy changes materially, the date at the top of this page changes with it.