Privacy at FaceMint.
Last updated: September 4, 2026. This policy explains the data flows built into the FaceMint starter application. The site operator should review and adapt this policy to the actual hosting, analytics, advertising, payment, consent, and legal requirements of the deployed service.
Portrait generation
When you request a portrait, your browser sends the request to the FaceMint server. The server sends a generated text prompt to the configured AI image provider and receives an image response. The provider may process request data according to its own terms and privacy policy. API secrets are kept server-side and are not intentionally exposed to browser JavaScript.
Technical information
The server may process basic request information such as IP address, browser headers, timestamps, and request paths for security, rate limiting, reliability, and abuse prevention. This starter does not include a user account database or its own analytics database.
Premium payments
If Premium is enabled, checkout is handled on Stripe-hosted Checkout. Payment card details are entered with Stripe, not directly into FaceMint. FaceMint receives information needed to verify whether the Checkout session completed successfully and stores signed session cookies to remember verified Premium status in the current browser session.
Cookies and Google advertising
If Google AdSense is enabled, third-party vendors including Google may use cookies to serve ads based on a visitor's prior visits to this website or other websites. Google's use of advertising cookies enables Google and its partners to serve ads based on visits to this site and/or other sites on the Internet.
Visitors can learn about or control Google ad personalization through Google Ads Settings. Depending on which advertising partners the operator enables, additional third-party vendors or ad networks may use cookies or similar technologies under their own privacy policies.
Consent
Cookie and advertising consent requirements vary by visitor location. Before production launch, the operator should implement any consent-management platform or controls required for the countries and audiences the site serves.
Data retention and rights
This starter does not intentionally create permanent FaceMint user profiles. Hosting providers, AI providers, Stripe, Google, and other configured services may retain information under their own policies. Where applicable law gives visitors access, deletion, objection, or other privacy rights, the deployed site's operator is responsible for providing an appropriate contact route and process.
Changes
This privacy notice may be updated when FaceMint's services or integrations change. The updated date above should be changed whenever the deployed policy is materially revised.