Legal
Privacy Policy
Last updated: October 2026
We built Nudeation to collect as little about you as possible. No real name, no address, no card data. This policy explains exactly what we store, how long we keep it, and who else sees any of it.
1. What we collect
The service is designed for minimal data collection. We hold:
- Email address — used to log in, send receipts, and contact you about your account.
- Firebase authentication UID — an internal identifier that links your login to your account.
- Uploaded images — stored temporarily while they are processed by the upstream generator.
- Generation history — a short record of jobs you ran (credits spent, timestamps, output references) so you can see your activity and we can bill correctly.
- Cryptocurrency payment hashes — the on-chain transaction IDs that correspond to credit purchases.
- IP address — logged for abuse prevention, fraud detection, and rate limiting only. Not used for marketing or profiling.
2. What we don't collect
We deliberately do not collect:
- Your real name.
- Your home address, phone number, or any government ID.
- Payment card numbers or bank details — we are crypto-only.
- Browsing history outside of Nudeation.
- Advertising identifiers or third-party tracking data.
3. How we use your data
Everything we store is used strictly to run the service and prevent abuse:
- Delivering generation requests to the upstream AI provider and returning the result to you.
- Billing — matching your crypto payment to your credit balance.
- Preventing fraud, duplicate accounts, and abuse (including enforcement of our content rules).
- Responding to support requests and legal requirements.
We do not sell your data. We do not use it for advertising. We do not share it except where this policy says so.
4. Third parties
To run the service we rely on a small number of third-party providers. Each one sees only the data they need:
- Firebase / Google — authentication, database (Firestore), and hosting. Receives your email, UID, and generation metadata.
- CryptAPI — processes cryptocurrency payments. Receives payment-related metadata; does not see your generations.
- Upstream AI generator — receives your uploaded image(s) solely to produce the generation you requested, then processes them according to its own policies.
We do not share data with anyone else except where legally required.
5. Retention
We keep the minimum necessary data for the minimum necessary time:
- Uploaded source images: deleted within 24 hours of generation.
- Generated outputs: retained up to 48 hours so you can download them, then deleted.
- Account data (email, UID, credit balance, payment hashes): kept until you request deletion or close your account.
- IP logs: rotated out after a short window; retained longer only for active abuse investigations.
6. Your rights
Regardless of where you live, we offer every user the following rights:
- Export — request a copy of the account data we hold on you.
- Deletion — delete your account and associated data. Some records (payment hashes, abuse flags) may be retained where required by law.
- Correction — correct inaccurate information.
- Objection — object to specific uses of your data.
Email privacy@nudeation.com to exercise any of these.
7. Cookies
We use cookies only for authentication — to keep you logged in. We do not use advertising cookies, analytics cookies, or any third-party tracking. If you clear your browser's cookies you'll be asked to log in again.
8. Security
We take reasonable steps to protect your data:
- All traffic is served over HTTPS.
- Payment callbacks are HMAC-signed and verified before any credit is granted.
- Firestore security rules restrict account data so a user can only read their own records.
- Automatic deletion of uploads and outputs reduces the window of exposure.
No system is perfectly secure. If we ever become aware of a breach that affects you, we will notify you promptly.
9. International transfers
Nudeation and its providers (Firebase, CryptAPI, the upstream AI generator) operate across multiple countries. By using the service you consent to your data being processed in jurisdictions outside your country of residence, with equivalent or stronger protection where legally required.
10. Minors
Nudeation is a strict 18+ platform. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, email abuse@nudeation.com immediately — we will remove the account and purge all associated data.
11. Contact
Privacy questions, data requests, or complaints: privacy@nudeation.com.
← Back to Nudeation