BOOKTOFACE
EN DE FR
How it works Gallery Log in Register

Privacy Policy

Last updated: October 14, 2026

1. Data Controller

Adrian Kobler, Stägmatt 32, 3302 Moosseedorf, Switzerland. Contact: contact form.

2. What Data We Process

  • Account data: email address and password hash upon registration.
  • Generation history: books searched, styles and models chosen, generated images and their timestamps, linked to the account or, for guests, to a device-stored identifier.
  • Usage and security data: hashed IP address and technical identifiers for abuse and fraud prevention (e.g. rate-limiting paid requests).
  • Google Analytics: anonymized usage statistics, only after your explicit consent via the cookie banner.

3. Legal Basis

Processing takes place to perform the contract or to carry out pre-contractual measures (Art. 6(1)(b) GDPR), to safeguard legitimate interests in secure and economically viable operation (Art. 6(1)(f) GDPR, in particular abuse and cost protection), and, for Google Analytics, on the basis of your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future.

4. Disclosure to Third Parties

To provide our service, we share necessary data with the following categories of data processors:

  • Image generation and AI providers (including Replicate and connected model providers, OpenRouter), to generate portraits and summaries from the books you choose.
  • Book metadata providers (Open Library, Google Books), to display titles, authors, and descriptions.
  • Payment provider, to process payments for the purchase of Credits. We do not process payment data ourselves; it is processed directly by the payment provider.
  • Google Analytics, only after consent.

5. Retention Period

Account data and generation history are stored for the duration of account use. After an account is deleted, personal data is deleted within a reasonable period, unless legal retention obligations require otherwise. Security-related logs (e.g. hashed IP addresses for abuse prevention) are deleted after 90 days at the latest.

6. Your Rights

You have the right to access, rectify, erase, and restrict the processing of your data, as well as to data portability. Contact us via our contact form. You can withdraw consent already given (e.g. for Google Analytics) at any time via the cookie banner.

7. Contact

For any questions about data protection, please use our contact form.

We use Google Analytics to understand how visitors use this site. No data is shared with third parties beyond Google. See our privacy policy for details.