Privacy policy

Last updated: September 6, 2026

This policy explains how Faceless Reels (“we”, “us”) handles personal data when you use Faceless Reels.

Information we collect

Account data. Google sign-in provides your Google account identifier, name, email address, and profile image. We store these so you can access your account and history.

Product data. We store prompts, lyrics and other submitted text, generation settings, model choices, status, credit usage, and result links. Do not submit sensitive personal information in prompts, lyrics, or reference media.

Temporary browser drafts and request recovery. When you start sign-in with an editing or generation form open, its current text, settings, and already-uploaded media references can be kept in this browser for up to 30 minutes so they can be restored after authentication or when you return without signing in. Sign-in drafts are removed when restored, and expired drafts are removed by the open page or on a later visit. Raw files selected from your device are not copied into this sign-in storage.

Billing data. Stripe processes payment details. We receive customer, subscription, invoice, payment-status, country, tax, and transaction identifiers, but not full card numbers.

Technical and analytics data. Essential logs may include IP address, browser details, timestamps, security events, and errors. If you consent, Google Analytics 4 and Microsoft Clarity may collect page use, interaction, device, and session data. Clarity may provide privacy-filtered session replay and heatmaps.

How and why we use data

We use data to provide and secure accounts, process generation and payments, maintain credit balances, prevent abuse, troubleshoot failures, support customers, measure product performance, and meet legal or tax obligations. Where applicable, our legal bases include performing our contract, legitimate interests in security and service improvement, consent for optional analytics, and compliance with law.

Processing partners and international transfers

We share only what is needed with Google for authentication and optional analytics, Stripe for billing, Microsoft for optional Clarity analytics, and the hosting, database, and generation-processing partners needed to operate the service. These partners may process data in other countries under their terms and legally recognized transfer safeguards.

Retention

Account and product records are kept while your account is active. Generation result links can expire under storage rules. Security logs are normally kept only as long as operationally needed. Billing and tax records may be retained for the period required by law. After a valid deletion request, we delete or anonymize data that is not legally required.

Cookies and controls

Essential cookies maintain your secure session and choices. We also use a random first-party browser identifier to count unique page visits and generate-button clicks without storing prompt text, uploaded content, or generation settings. Optional third-party analytics runs only after you choose “Allow analytics”. GA4 receives registered event names and a canonical clean public-page path, never query strings, fragments, account identifiers, prompts, filenames, provider responses, uploaded or generated content, or custom product-event properties; advertising storage, Google signals and ad personalization are disabled. Account, sign-in, admin, receipt, unknown, query-string and fragment-bearing documents do not load optional analytics. You can withdraw through the cookie policy; the page reloads after clearing only this site's optional analytics cookies.

Your rights

Depending on where you live, you may request access, correction, deletion, portability, restriction, or objection, and may withdraw analytics consent. You can submit deletion from the account page or email [email protected]. We may need to verify your identity. You may also complain to your local data-protection authority.

Children

The service is not directed to children under 13, and users must be old enough to enter a binding contract in their jurisdiction.

Security and changes

We use access controls, secured session cookies, server-side credentials, signed Stripe webhooks, and encrypted transport. No system is completely secure. Material policy changes will be posted here with a new effective date.

Contact

Data controller: Faceless Reels. Privacy questions: [email protected].

Welcome-credit abuse prevention

To prevent repeated welcome-credit claims, an essential first-party browser cookie lasts up to one year. Our server stores a hashed random browser identifier to limit the welcome offer to once per browser per site. This does not use Google Analytics, track you across sites, or change existing balances or daily check-in rewards. Shared-browser users can still register and use their accounts; contact support if you believe an offer was withheld in error.