Privacy Policy | Goatee.io - Your Data Protection

Introduction

Goatee.io is an AI-powered virtual goatee and beard simulator. This policy explains what information we collect when you use the service, how it is processed (including by third-party AI providers), how long it is kept, and the choices you have.

This policy describes our actual data flow. If a specific practice changes, we will update this page and the "last updated" date below.

Who We Are

Goatee.io is an independent web product operated by the Goatee.io team. For any privacy question or request, contact us at support@goatee.io.

Information We Collect

1. Account Information

What: Email address and authentication identifiers when you create an account or sign in with Google or GitHub.
Purpose: To manage your account, store your credit balance and generation history, and provide support.

2. Uploaded Photos

What: The photo you upload to preview a goatee or beard style.
Purpose: Solely to generate your requested AI preview.
Important: Your photo is sent to a third-party AI image provider to produce the result (see "AI Processing" below).

3. Generated Images

What: The AI-generated preview images you create.
Purpose: To display, download and — if you are signed in — temporarily store your results.

4. Payment Information

What: When you purchase credits or a subscription, payment is handled by our payment processor (e.g. Stripe). We do not store your full card details on our servers; we receive a transaction record and status.
Purpose: To process payments, manage subscriptions and issue refunds.

5. Device & Usage Data

What: Browser type, device type, operating system, IP address, and basic interaction/usage events.
Purpose: Security, abuse prevention (including free-preview limits), and aggregate, non-identifying analytics to improve the service.

6. Cookies & Similar Technologies

What: Essential cookies for authentication and preferences, plus analytics and — where applicable — advertising cookies (see "Advertising & Google" below).

AI Processing (Face Photos)

To generate a preview, your uploaded photo is transmitted to a third-party AI image-generation provider (for example Google Gemini, or partner APIs such as kie.ai / OpenRouter). These providers process the image only to return a generated result. We do not use your uploaded photos to train our own AI models.

Each provider operates under its own privacy and data-handling terms. We select providers that process the image for the request and do not require us to grant training rights over your photo. We cannot guarantee a third party's independent practices, so please only upload photos you are comfortable sharing for this purpose.

On-device face analysis. Our optional "Style Match" feature estimates your face shape using Google MediaPipe, which runs entirely in your browser. The facial landmarks it computes are processed locally on your device and are not uploaded to or stored by us.

Storage, Retention & Deletion

Where: Uploaded photos and generated images are stored on object storage (Cloudflare R2).
How long: Generated results and their history are made available for 24 hours, after which they are scheduled for deletion. Uploaded source photos are retained only as long as needed to deliver your result and are removed on the same cycle.
Account data is retained while your account is active.
Deletion: Signed-in users can delete generated results from their history and can delete their account and associated data in account settings. If you used the tool without an account, or want anything else removed, email support@goatee.io and we will process the request.
Residual copies may persist briefly in encrypted backups or provider logs before rotating out.

How We Use Your Information

Provide and operate the AI goatee/beard simulator
Process uploaded photos and generate results
Manage your account, credits, subscriptions and history
Prevent abuse and enforce free-preview limits
Respond to support requests
Analyze aggregate usage to improve the service

We do not sell your personal information, and we do not use your photos to train our own models.

Third-Party Service Providers

We rely on the following categories of processors:

Authentication: Google and GitHub (OAuth sign-in)
AI image generation: third-party model providers such as Google (Gemini) and partner image APIs (e.g. kie.ai, OpenRouter)
Payments: our payment processor (e.g. Stripe / Creem / PayPal, depending on region)
Storage & hosting: Cloudflare (R2 object storage and CDN) and our hosting platform
Email: transactional email delivery for account and support messages
Analytics & advertising: Google Analytics / Google Tag Manager and, where enabled, Google AdSense

Each provider maintains its own privacy policy governing how it handles data.

Advertising & Google

We may display advertising, including through Google AdSense. When advertising is served:

Google and other third-party vendors may use cookies, web beacons, IP addresses, or other identifiers to serve and measure ads.
Third-party vendors, including Google, may use these identifiers to serve ads based on your prior visits to this and other websites.
You can manage or opt out of personalized advertising through Google Ads Settings and www.aboutads.info.

Where required for visitors in the EEA, UK and Switzerland, we use a Google-certified consent management platform to request consent before setting non-essential advertising or analytics cookies, and you can change or withdraw your consent at any time via the consent controls.

International Data Transfers

Our providers may process data in countries other than your own, including the United States. Where required, transfers rely on appropriate safeguards provided by those processors.

Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you
Correct or delete your data
Delete your account and associated data
Export your saved images
Object to or withdraw consent for non-essential processing

To exercise any right, use account settings or email support@goatee.io.

Last updated: August 6, 2026