Privacy Policy

Summary

Vibe Like Rick lets you try two generations as a guest, sign in by email to save results, upload a selfie, generate an edited image, and optionally buy generation credits. We collect the information needed to run that service, prevent abuse, keep account and purchase records, and respond to support requests.

Information We Collect

• Account and guest information: your email address if you sign in, login-code records, session records, guest-session records, credit balances, account timestamps, and sign-in status.
• Uploaded and generated content: selfies you upload, generated images, image storage keys, model request IDs, generation status, and errors if a generation fails.
• Payment records: Stripe Checkout session IDs, purchase amount, credit quantity, and payment status. We do not receive or store full card numbers.
• Operational logs: event type, timestamp, hashed IP address, country code when Cloudflare provides it, browser user agent, and limited event metadata such as generation or checkout IDs.
• Messages: information you send if you contact us for support, deletion, or billing help.

Photos and Face Information

Your selfie may include face information. We use uploaded photos only to create your requested image, show your generation history, prevent abuse, troubleshoot failures, and honor support or deletion requests. We do not use uploaded photos to identify you, verify your identity, enroll a biometric template, or train a facial-recognition system.

How We Use Information

• Authenticate you and keep you signed in.
• Generate, store, display, and let you access your images.
• Track free and paid generation credits.
• Process purchases and reconcile Stripe webhooks.
• Review usage, diagnose errors, prevent fraud or abuse, and protect the service.
• Respond to requests about your account, images, purchases, or rights.

Service Providers

We use service providers to operate the site, including Cloudflare for hosting, D1 database, R2 storage, email routing, and security; Fal or OpenAI for image generation depending on configuration; Stripe for checkout and payment processing; and Resend if email fallback is enabled. These providers process information for the purposes described here and under their own service terms and privacy notices.

Sharing

We do not sell your personal information. We do not share it for cross-context behavioral advertising. We share information with service providers, when you direct us to make an image available through a link, when needed for security or legal compliance, or as part of a business transfer such as a sale or reorganization.

Generated Image Links

Generated images and uploaded image assets are served through hard-to-guess URLs. Anyone with a result URL may be able to view that image. Do not share a link unless you are comfortable with the recipient seeing it.

Cookies

We use an HTTP-only session cookie named rubin_session to keep you signed in and an HTTP-only guest cookie named rubin_guest to count your two guest generations before sign-in. These cookies expire after about 30 days unless replaced sooner. We do not use third-party advertising cookies.

Retention

We keep account, generation, purchase, and operational records for as long as needed to provide the service, maintain business records, resolve disputes, prevent abuse, and comply with legal obligations. Login codes expire after 15 minutes, although hashed code records may remain until routine cleanup. You can ask us to delete your account or images.

Your Choices and Rights

You can stop using the service, log out, or contact us to request access, correction, deletion, or export of information associated with your email address. Depending on where you live, you may have additional privacy rights, including rights to know, access, correct, delete, or limit certain uses of personal information. We will verify requests before acting on them.

Children

The service is not intended for children under 13, and it should not be used by minors without the consent and supervision required by applicable law. Do not upload images of children or anyone who has not consented.

Security

We use reasonable administrative and technical safeguards, including HTTP-only cookies, signed sessions, restricted admin access, and hashed audit IPs. No internet service can be guaranteed to be completely secure.

Contact

For privacy requests, deletion requests, or questions, email hello@vibelikerick.com.