Privacy Policy

Last updated: October 1, 2026

1. Who We Are

BafanTattoo ("we", "our", "us") operates the website bafantattoo.com, an AI-powered tattoo design generator. We are committed to protecting your personal information and being transparent about what we collect and why.

2. Information We Collect

When you sign in, we receive the following from your identity provider (Google):

Email address
First and last name
Profile picture URL

We also store the tattoo designs you generate (prompts and resulting images) and your credit balance. If you make a payment, the transaction is processed by PayPal — we do not store your card or payment details.

We keep an activity log of what happens in your account: signing in and out, generating, downloading, publishing, liking and deleting designs, credit purchases, and errors you run into. Each entry records your account ID, the time, your IP address and the details of the action (for example the prompt you entered). Errors on the site are logged with your IP address and browser type even when you are not signed in. This log is stored only on our own server and is not shared with third parties.

3. How We Use Your Information

To create and manage your account
To provide the tattoo generation service
To track and manage your credit balance
To display your generated designs in the gallery (if you choose to share them)
To respond to support requests
To keep the service secure, investigate errors and abuse, and improve the product (activity log)

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Google Sign-In

We use Google OAuth 2.0 to allow you to sign in with your Google account. When you choose this option, Google shares your name, email address, and profile picture with us. We only request the minimum permissions needed to identify you. We do not access your Google Drive, Gmail, or any other Google services.

5. Cookies, Sessions and Analytics

We use a single session cookie to keep you logged in. This cookie is essential for the service to function and does not track you across other websites. We do not use advertising cookies.

To understand how the site is used, we run Umami, a privacy-friendly analytics tool that we host ourselves. It sets no cookies, does not track you across websites, and stores only anonymous, aggregated information such as pages visited, referring sites, country, device type and page load performance. This data stays on our own server.

We currently also use Google Analytics, which sets cookies and sends usage data to Google under its own privacy policy. We plan to stop using it.

6. Data Retention

Your account data is retained for as long as your account is active. Generated designs are stored indefinitely to power the gallery. Activity log entries are kept until we delete or archive them. You may contact us at any time to request deletion of your account and associated data, including your activity log.

7. Security

We use industry-standard practices to protect your data, including HTTPS encryption, secure session management, and a private database. We never store passwords — all authentication is handled through trusted identity providers (Google).

8. Your Rights

You have the right to access, correct, or delete your personal data at any time. To exercise these rights, please contact us using the details below.

9. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the date at the top of this page. Continued use of the service after changes constitutes your acceptance of the updated policy.

10. Contact

If you have any questions about this privacy policy or how we handle your data, please reach out via our contact page.