FreeArtGen is built on a no-account principle: we do not collect your name, email, or any personally identifying information. This policy explains what limited data we do handle.
What we collect
Every time you click Generate, we write one record to our database containing:
- A hashed IP address — your IP is passed through SHA-256 with a rotating salt before storage. The hash is not reversible; it exists solely to enforce the per-hour rate limit.
- Your prompt text — stored to support NSFW pattern detection and cost reconciliation. It is not linked to any user identity.
- Generation metadata — aspect ratio, style choice, output status, latency, and whether the request is eligible for anonymous Gallery publication.
- Timestamp — used for rate-limit windowing and operational monitoring.
What we do not collect
- Name, email, or any account information
- Payment information (the Service is free)
- Device fingerprints or cross-site identifiers
- Reference images you upload; they are never stored or published in the Gallery
Third-party services
Runware — your prompt and generation parameters are sent to Runware’s API to run inference. Runware returns a CDN URL. For eligible prompt-only requests that pass our public-safety checks, we copy the generated result—not a reference image—to our Gallery storage by default. Runware’s own privacy policy governs how they handle inference requests.
Plausible Analytics — we use a self-hosted instance of Plausible for aggregate traffic analytics. No cookies, no individual tracking, no personal data.
Microsoft Clarity — we use session recordings and interaction analytics to understand where visitors get stuck. Form inputs are masked, generated media is excluded from recordings, and we send only anonymous product events such as generation outcome, download, and handoff clicks—never your prompt or generated output. Clarity receives your cookie choice from our consent banner; declining keeps it in limited cookieless mode.
Google AdSense — the Service displays ads served by Google AdSense. Google may use cookies and similar tracking technologies. You can opt out via Google’s ad settings.
Sentry — error monitoring. Anonymized stack traces only.
Data retention
Generation records (hashed IP, prompt, metadata) are retained for up to 90 days for operational purposes, then deleted in automated sweeps. Eligible Gallery items published by default are retained publicly until removed. Each Gallery card includes a report/removal link.
Anonymous public Gallery
Eligible prompt-only requests are published anonymously by default. Public items show only the prompt, generated result, originating tool, and date—never an IP hash or identity. Requests that include a reference image, obvious contact details, unsafe content, or system test prompt are excluded automatically. Gallery pages carry noindex directives for search engines.
Your rights
Because we do not link any data to a user identity, we cannot look up, export, or delete records “for you” individually. EU GDPR questions: contact us via the address on the About page.
Children
The Service is not directed at children under 13. NSFW filtering is on by default to prevent harmful content generation.
Changes to this policy
We may update this policy as the Service evolves. The “last updated” date above will reflect any revision.