Privacy Policy

What we process

One photo per scan. It is resized on your device, sent over an encrypted connection, read in memory to generate your verdict, and never stored by us. There is no photo archive to leak, sell, or subpoena.

The verdict itself (score, title, roast, and report text) is stored under a random ID for 24 hours so your result link works, or up to 7 days if you unlock or purchase so what you paid for stays reachable. Then it is deleted automatically.

When you consent to a scan we log one consent event: a timestamp and a hashed IP address. The photo is never part of that record. We keep consent events for 3 years, then delete them.

There are no accounts, no ad profiles, and no tracking cookies. We could not look you up if we wanted to, because there is nothing to look you up in.

Who processes your photo

Five providers touch a scan, each with one job.

Google (Gemini vision) generates the verdict. We use the paid API tier, where Google does not use API prompts or responses to train its products. Google keeps limited-duration abuse-monitoring logs.

OpenAI runs a safety pre-check on every photo and is the backup verdict provider. OpenAI does not train on API data by default and keeps abuse-monitoring logs for up to 30 days. On top of that, we send store:false on every call.

Cloudflare (Turnstile) runs the bot check before a scan. It processes your IP address, TLS fingerprint, user agent, and our sitekey. See the Turnstile Privacy Addendum at https://www.cloudflare.com/turnstile-privacy-policy/ for details.

Upstash (Redis) holds the short-lived result state and the durable consent log described above.

Vercel hosts the app and provides privacy-friendly, cookieless analytics.

What we never do

We do not sell your data. We do not build ad profiles. We do not store your photo. We do not train our own models on anything you send.

On provider retention, the honest version: your photo is not stored by us, it is not used for training, and providers keep only a short abuse-monitoring window. We phrase it that way because it is the accurate way to phrase it.

The battle storage exception

Battles keep small battle thumbnails for 48 hours so the shared verdict page works. That exception is disclosed on the battle's own consent screen, and the thumbnails delete automatically after 48 hours.

If a challenger's opponent never plays, the challenger's own score and title, with no photo, are kept for up to 72 hours so they can still see their own result. Want a battle gone sooner? Anyone who played in it can open its page and tap Delete to remove it and its thumbnails right away.

One more exception, started by you: opening a certificate checkout stores a small copy of your photo with your result so the certificate PDF can include it — whether or not you finish the purchase. It deletes together with the result, within 7 days at most.

Your choices and contact

Results self-delete within 24 hours, or up to 7 days if you unlock or purchase, so the fastest delete button is time. For privacy requests or questions, email support@gaylab.ai and a human will answer.

Age

GayLab is for adults 18 and over. You confirm it before every scan, and we mean it.