Privacy Policy

Last Updated: December 29, 2025

Introduction

Welcome to Oh My Images. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI image generation platform.

By using Oh My Images, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

Information We Collect

Account Information

**Email Address**: Required for account creation and login
**Name**: Your display name on the platform
**Profile Picture**: Your avatar image (optional)
**Account Creation Date**: Timestamp of when you registered
**Email Verification Status**: Whether your email has been verified

Session Information

**IP Address**: Your device's IP address when accessing our service
**Browser Information**: User agent string (browser type, version, operating system)
**Session Tokens**: Encrypted tokens to maintain your login state
**Session Expiration**: Timestamp of when your session expires

AI Generation Records

**Prompts**: The text descriptions you input for AI image generation
**Generation Parameters**: Settings like aspect ratio, resolution, number of images
**Reference Images**: Images you upload for image-to-image generation (stored temporarily)
**Model Selection**: Which AI model you choose to use
**Generation Results**: URLs of generated images (deleted after 24 hours)
**Credits Consumed**: How many credits each generation costs
**Task Status**: Whether generation succeeded or failed
**Timestamps**: When each generation task was created and completed

Third-Party Authentication Data

**OAuth Tokens**: Access tokens, refresh tokens from Google OAuth
**Third-Party Account ID**: Your unique identifier from the authentication provider
**Token Expiration**: When authentication tokens expire

Advertising and Analytics Data

**Device Information**: Device type, screen resolution, operating system
**Browsing Behavior**: Pages visited, time spent on pages, click patterns
**Geographic Location**: Approximate location based on IP address (country/region level)
**Advertising Identifiers**: Cookies and similar identifiers used for ad personalization
**Ad Interaction Data**: Ads viewed, clicked, and conversion events

How We Use Your Information

**Provide Services**: Process your AI image generation requests and deliver results
**Account Management**: Create and maintain your user account, manage login sessions
**Credits System**: Track your credit balance, process credit transactions and refunds
**Display Advertising**: Show relevant advertisements to support our free services
**Service Improvement**: Analyze usage patterns to improve our platform (anonymized data only)
**Communication**: Send important service announcements and respond to support requests
**Security**: Detect and prevent fraud, abuse, and security threats
**Legal Compliance**: Comply with applicable laws and legal obligations

Advertising and Third-Party Partners

Ezoic Advertising Platform

We partner with **Ezoic Inc.** to display advertisements on our website. Ezoic uses cookies and similar technologies to collect data about your device, browsing activity, and interactions with advertisements.

**What Ezoic Collects**:

- Device and browser information

- IP address (for geographic targeting)

- Pages you visit and time spent

- Ad impressions and clicks

- Unique identifiers via cookies

**How Ezoic Uses This Data**:

- To display personalized advertisements

- To measure ad performance and optimize ad placement

- To prevent ad fraud

- To provide aggregated analytics to advertisers

Ezoic is a certified member of the **IAB Transparency and Consent Framework (TCF 2.2)** and complies with GDPR and CCPA requirements.

For more information, please review Ezoic's Privacy Policy: https://www.ezoic.com/privacy-policy/

Google Ad Manager and Ad Networks

Through Ezoic, advertisements may be served by **Google Ad Manager** and various demand partners including:

- Google AdSense / Google Ads

- Amazon Publisher Services

- Index Exchange

- OpenX

- Rubicon Project

- And other programmatic advertising partners

These partners may use cookies, pixel tags, and similar technologies to collect information for advertising purposes.

Google's advertising policies: https://policies.google.com/technologies/ads

Your Advertising Choices

You have several options to control advertising data collection:

**Consent Management**: When you first visit our site, you will see a consent banner (provided by Ezoic CMP) where you can choose your privacy preferences. You can update these preferences at any time by clicking the cookie/privacy icon that appears on the page or by clearing your browser cookies and revisiting our site.

**Opt-Out Options**:

- **Google Ads**: https://adssettings.google.com

- **NAI Opt-Out**: https://optout.networkadvertising.org

- **DAA Opt-Out**: https://optout.aboutads.info

- **Your Online Choices (EU)**: https://www.youronlinechoices.eu

**Browser Settings**: You can configure your browser to block third-party cookies. Note that this may affect website functionality.

**Do Not Track**: We honor Do Not Track (DNT) browser signals where technically feasible.

Cookies and Tracking Technologies

Essential Cookies

We use **HTTP-only session cookies** to maintain your login state. These cookies are essential for the website to function properly and cannot be disabled.

**Cookie Type**: Session cookie (authentication token)

**Purpose**: Keep you logged in as you navigate between pages

**Duration**: Expires when you log out or after session timeout

**Security**: HTTP-only flag prevents JavaScript access, protecting against XSS attacks

Advertising and Analytics Cookies

With your consent, we and our advertising partners use cookies for:

**Personalization Cookies**:

- Remember your preferences

- Customize ad content based on your interests

- Limit how often you see the same ad

**Analytics Cookies**:

- Measure website traffic and usage patterns

- Understand how visitors interact with our content

- Improve website performance

**Advertising Cookies**:

- Deliver relevant advertisements

- Track ad impressions and clicks

- Measure advertising campaign effectiveness

- Enable cross-site advertising and retargeting

These cookies may be set by us or by third-party partners whose services we have added to our pages. You can manage your cookie preferences through our consent management tool.

Cookies We Use

|-------------|----------|---------|----------|

Note: The specific cookies may vary as our advertising partners update their services.

Third-Party Data Sharing

AI Model Providers

To generate images, we send your data to third-party AI model providers via their APIs. Here's exactly what they receive:

**Data Sent to AI Providers**:

- Your text prompts

- Reference image URLs (for image-to-image generation)

- Generation parameters (aspect ratio, resolution, etc.)

**Data NOT Sent**:

- Your user ID, email, or name

- Your IP address or browser information

- Your credit balance or payment information

- Any personally identifiable information

**AI Providers We Use**:

- **ApiMart** (for Nano Banana, GPT-4o, Seedream models)

- **Kie** (for Nano Banana Pro model)

**Note**: Reference images are first uploaded to our Cloudflare R2 storage, then the R2 URL is passed to AI providers. They can see the image content but cannot link it to your identity.

Advertising Partners

We share certain data with advertising partners to support our free services:

**Data Shared**:

- Device and browser information

- IP address (for geographic targeting and fraud prevention)

- Cookie identifiers

- Browsing behavior on our site

- Ad interaction data

**Partners**:

- Ezoic Inc. (primary advertising platform)

- Google (Ad Manager, AdSense)

- Various programmatic advertising demand partners

This data sharing is governed by our consent management system and applicable privacy laws.

Authentication Provider

We use **Google OAuth** for login. When you sign in with Google:

- Google receives your login request and verifies your identity

- We receive your email address, name, and profile picture from Google

- We store OAuth tokens to maintain your login session

- Your login activity is subject to Google's Privacy Policy: <a href='https://policies.google.com/privacy' target='_blank' class='text-primary hover:underline'>https://policies.google.com/privacy</a>

Cloudflare Services

Our service is hosted on **Cloudflare's global network**:

- **Cloudflare Workers**: Runs our application code

- **Cloudflare R2**: Stores uploaded and generated images (24-hour retention)

- **Database**: May be hosted on Cloudflare or third-party services

- Your data passes through Cloudflare's infrastructure, which is subject to Cloudflare's Privacy Policy: <a href='https://www.cloudflare.com/privacypolicy/' target='_blank' class='text-primary hover:underline'>https://www.cloudflare.com/privacypolicy/</a>

Data Retention and Deletion

Generated and Uploaded Images

**Retention Period**: 24 hours

**Automatic Deletion**: All images stored in Cloudflare R2 are automatically deleted 24 hours after creation

**Database Records**: After deletion, only metadata (prompt, model used, credits consumed) remains in our database, without the actual image files

**Privacy Protection**: We do not retain expired images to protect your privacy

Account Data

**Retention Period**: As long as your account is active

**Account Deletion**: You can request account deletion by contacting support@ohmyimages.com

**Processing Time**: We will delete your account within 7 business days of receiving your request

**Retained Data**: Some financial records (credit transactions, payment invoices) may be retained for up to 7 years for tax and legal compliance

Advertising Data

**Cookie Duration**: Advertising cookies typically expire within 13 months

**Log Data**: Advertising interaction logs may be retained by our partners for up to 26 months

**Opt-Out**: You can delete advertising cookies at any time through your browser settings or our consent management tool

Session Data

**Retention Period**: Session tokens expire after a set period of inactivity

**Automatic Cleanup**: Expired sessions are automatically deleted from the database

Your Rights

**Access**: Request a copy of the personal data we hold about you
**Correction**: Request correction of inaccurate or incomplete data
**Deletion**: Request deletion of your account and associated data (contact support@ohmyimages.com)
**Data Portability**: Request your data in a machine-readable format
**Objection**: Object to processing of your data for certain purposes, including targeted advertising
**Withdraw Consent**: Withdraw consent for data processing at any time (by updating your privacy preferences or deleting your account)
**Opt-Out of Sale/Sharing**: California residents can opt out of the "sale" or "sharing" of personal information for advertising purposes

To exercise these rights, please contact us at support@ohmyimages.com. We will respond within 30 days.

Data Security Measures

**Encryption**: All data transmitted between your browser and our servers is encrypted using HTTPS/TLS
**Secure Authentication**: We use industry-standard OAuth 2.0 for authentication
**HTTP-Only Cookies**: Session cookies are protected with HTTP-only flags to prevent XSS attacks
**Access Controls**: Database access is restricted to authorized personnel only
**Regular Security Audits**: We regularly review and update our security practices
**Cloudflare Protection**: Our infrastructure benefits from Cloudflare's DDoS protection and WAF (Web Application Firewall)

While we implement robust security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Children's Privacy

Our service is intended for users aged **14 years and older**. We do not knowingly collect personal information from children under 14.

If you are a parent or guardian and believe your child under 14 has provided us with personal information, please contact us at support@ohmyimages.com, and we will promptly delete such information.

International Data Transfers

Oh My Images is operated by an independent developer located in **China**. However, our service is hosted on **Cloudflare's global network**, which means your data may be processed and stored in multiple countries, including the United States and European Union member states.

Our advertising partners, including Ezoic and Google, may also process your data in various jurisdictions. These partners comply with international data protection laws, including GDPR. By using our service, you consent to the transfer of your data to countries outside your country of residence.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

**Right to Know**: You can request information about the categories and specific pieces of personal information we have collected about you.

**Right to Delete**: You can request deletion of your personal information, subject to certain exceptions.

**Right to Opt-Out**: You can opt out of the "sale" or "sharing" of your personal information. Note: We share data with advertising partners, which may constitute a "sale" or "sharing" under California law. You can opt out through our consent management tool.

**Right to Non-Discrimination**: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at support@ohmyimages.com or use our consent management tool.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes:

- We will update the "Last Updated" date at the top of this page

- We may notify you via email or through a prominent notice on our website

- Continued use of our service after changes constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

**Email**: support@ohmyimages.com

**Discord Community**: https://discord.gg/9gHrncuBnS

**X (Twitter)**: @itshomie1024

We will respond to your inquiry within 30 days.