Privacy Policy

01 Who we are

Drawn Desires ("we", "us", "our") operates the website at drawndesires.com and all related subdomains. We provide an AI-powered adult image generation platform for users aged 18 and over.

For all privacy-related inquiries, contact us at legal@drawndesires.com.

02 What data we collect

We collect only the data necessary to provide and improve the service:

• Account data: Email address and hashed password if you create an account.
• Payment data: Transactions are handled by CCBill or our crypto processor. We receive only a transaction reference and plan type — never your full card number.
• Usage data: Prompts you submit, styles selected, resolution settings, and generation timestamps. This is used to serve your request and improve model quality.
• Gift link data: If you create a gift link, we store the associated image URL, your custom message, and a randomly generated UUID. No personal data about the recipient is collected.
• Technical data: IP address, browser type, and device type for security and fraud prevention. This is never linked to your generated content.
• Cookies: Session cookies for login state. No third-party advertising cookies.

03 How we use your data

• To process and serve your image generation requests.
• To manage your account, subscription, and credits.
• To send transactional emails (receipts, subscription updates). We do not send marketing emails unless you opt in.
• To detect and prevent fraud, abuse, or illegal activity.
• To comply with legal obligations.
• To improve generation quality using anonymised, aggregated prompt patterns — never linked to your identity.

We do not use your data for advertising profiling, sell it to third parties, or share it with AI training datasets.

04 Image storage & deletion

Images are stored on encrypted cloud infrastructure solely to serve your session and any active gift links. They are never used for training, never shared with third parties, and never indexed by search engines.

You can request immediate deletion of all your images at any time by contacting legal@drawndesires.com or through your account settings.

05 Data sharing

We do not sell, rent, or trade your personal data. We share data only in these limited circumstances:

• Payment processors: CCBill and our crypto processor receive transaction data necessary to complete your purchase.
• Infrastructure providers: Cloud hosting and database providers process data on our behalf under strict data processing agreements.
• AI inference providers: Your prompt is sent to our AI inference API (e.g. FAL.ai or Replicate) to generate the image. These providers process prompts under their own privacy policies and do not receive your account identity.
• Legal requirements: We may disclose data if required by law, court order, or to protect the rights and safety of users.

06 Payments & billing

All card payments are processed by CCBill, a PCI-DSS compliant payment processor specialising in adult platforms. CCBill's privacy policy governs how they handle your payment data. We receive only a confirmation token and plan identifier — your card details are never transmitted to or stored on our servers.

Crypto payments are processed via a third-party crypto payment gateway. Wallet addresses are not stored by us beyond the transaction confirmation period.

Your billing statement will show a discreet descriptor that does not reference Drawn Desires or adult content.

07 Cookies & tracking

We use the following cookies:

• Session cookie: Keeps you logged in during your visit. Expires when you close your browser or log out.
• Auth token cookie: Persists your login for 30 days if you select "Remember me". Encrypted and HttpOnly.
• Age-gate cookie: Records that you have confirmed you are 18+. Expires after 365 days.

We do not use Google Analytics, Facebook Pixel, or any third-party advertising or tracking cookies. We do not participate in cross-site tracking.

08 Your rights (GDPR / CCPA)

Depending on your location, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your account and all associated data ("right to be forgotten").
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Restriction: Request that we limit processing of your data in certain circumstances.
• Opt-out of sale (CCPA): We do not sell personal data. No opt-out is needed, but you may request confirmation at any time.

To exercise any of these rights, contact legal@drawndesires.com. We will respond within 30 days.

09 Minors

This service is strictly for users aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has accessed the service or submitted data, contact us immediately at legal@drawndesires.com and we will delete any associated data immediately.

We employ an age-gate mechanism on entry to the platform to prevent underage access. Parents or guardians who believe their child has bypassed this gate should contact us without delay.

10 Security

We implement industry-standard security measures to protect your data:

• All data in transit is encrypted via TLS 1.2 or higher.
• Passwords are hashed using bcrypt — we never store plaintext passwords.
• Generated images are stored in private, access-controlled cloud storage.
• API keys and secrets are never exposed client-side.
• Regular security audits and dependency updates.

In the event of a data breach affecting your personal data, we will notify affected users within 72 hours in accordance with GDPR requirements.

11 Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and notify registered users by email. Continued use of the service after changes are posted constitutes acceptance of the revised policy.

12 Contact

For any privacy-related questions, data requests, or concerns: