1. What this policy covers
This Privacy Policy explains how TheFake collects, uses, stores, and protects personal data when you visit our website, create an account, use the editor, contact us, or buy a paid plan.
We keep the product privacy-first where it matters most: the fake chat screenshots and videos you create are yours. We use account, billing, support, and usage data only to run, secure, improve, and support the service.
2. Data we collect
We collect the minimum practical data needed to operate TheFake:
- Account data: email address, display name, login identifiers, and account status.
- Project data: messages, names, settings, and other scene details when a signed-in account syncs saved projects.
- Uploaded media: images used by signed-in accounts, cloud projects, or server-rendered exports. Guest images used only for local screenshots stay in browser storage.
- Contact data: messages you send us, support requests, and reply history.
- Billing data: plan, purchase, invoice, refund, and subscription status details.
- Usage data: product events, pages viewed, feature usage, and settings that help us improve the editor.
- Technical data: IP address, browser, device, operating system, timestamps, and security logs.
- Preference data: choices such as theme, editor settings, and cookie preferences where available.
3. How we use data
We use personal data to:
- Create, secure, and maintain your account.
- Sync saved projects for signed-in accounts.
- Keep guest media in browser storage, and upload media when a signed-in cloud or server-rendered feature requires it.
- Provide the editor, screenshots, subscription access, and customer support.
- Process purchases, invoices, cancellations, and refunds.
- Improve performance, reliability, templates, and product flow.
- Detect abuse, fraud, policy violations, and security incidents.
- Comply with legal, tax, accounting, and regulatory obligations.
4. Legal bases for processing
Depending on where you live, we process personal data under one or more lawful bases: contract performance, legitimate interests, consent, and legal obligations. Our legitimate interests include keeping the service secure, improving the product, preventing abuse, and responding to user requests.
5. Payment processing
We use Polar to process payments and manage hosted billing flows. Your card number, CVV, and other sensitive payment credentials are sent directly to Polar. We receive limited billing records needed to confirm purchases, manage subscriptions, issue receipts, and handle support.
You can review Polar's practices in Polar's Privacy Policy.
6. Cookies and analytics
- Essential cookies: required for authentication, account security, billing, and core site behavior.
- Analytics cookies: help us understand page visits, product usage, and reliability issues.
- Preference cookies: remember choices such as interface settings.
7. Data retention
We keep personal data only as long as needed for the purpose it was collected. Account data is kept while your account is active and for a reasonable period afterward. Billing and tax records may be retained longer where law requires it. Support messages are kept long enough to resolve issues and maintain a useful support history.
Cloud-saved projects and uploaded media are retained while needed to provide those features or until deletion is requested, subject to reasonable backup, security, and legal retention requirements. Temporary render data is discarded after processing when it is no longer needed to deliver the export.
8. Data security
We use technical and organizational safeguards designed to protect personal data from unauthorized access, loss, misuse, alteration, or disclosure. No internet service can guarantee absolute security, but we limit access to people and providers who need it to operate the service.
9. Third parties and links
We use trusted service providers for hosting, authentication, analytics, storage, AI, rendering, support, billing, and infrastructure. These providers may process personal data for us under their own terms and privacy commitments. TheFake may also link to third-party websites; their privacy practices are not controlled by us.
10. International transfers
Your data may be processed in countries other than where you live. Where required, we use appropriate safeguards for international transfers, such as contractual protections and provider security commitments.
11. Your privacy rights
Depending on your location, you may have the right to access, correct, delete, export, or restrict the processing of your personal data. You may also object to certain processing or withdraw consent where processing is based on consent.
To exercise these rights, email privacy@thefake.design. We may need to verify your identity before completing a request.
12. Children's privacy
TheFake is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided personal data, contact us and we will take appropriate action.
13. Changes to this policy
We may update this policy as the product, providers, or legal requirements change. When we do, we will update the date at the top of this page.
14. Contact
Questions about privacy can go here:
- Email: privacy@thefake.design
- General support: Contact page