Privacy policy

About this policy

Malfoid AI ("we", "us" and "our") explains here how information is handled when you visit ai.malfoid.com, create an account or contact support. This policy covers the AI service; the main website at malfoid.com has its own policies. For privacy questions, contact contact@malfoid.com.

Public image generation and purchases are currently unavailable. A restricted operator account can verify payment and generation; the corresponding processing described below applies to that verification. The sections about generation and payments below describe the intended handling when those features open, rather than processing that a visitor can initiate today. Homepage examples are previously generated images.

Information we collect

Account information. We store the account name and email you provide, a password hash if you set a password, email-verification status and account timestamps. We also store login sessions and their expiry, which can include an IP address and browser user agent. Verification and password-recovery credentials are temporary; do not share their links. Your profile image, if you upload one, is stored for account display and may be publicly accessible. Avoid using an image that contains private information.

Sign-in security records. We record successful sign-in session creation, time, login method, connection IP address, approximate country/region supplied by our hosting service, and browser user agent. Authorized administrators can review these records for account support, security and account activity totals. Location is an IP-based estimate and may reflect a VPN or proxy. These records start when the feature is enabled; they are separate from current sessions and are retained under the retention policy below.

Google sign-in. If you choose Google sign-in when available, we receive your Google account identifier, name, email address, email-verification status and profile picture, where provided. Our authentication service processes sign-in tokens and stores the linked-account information needed to authenticate you. This login requests basic identity information, not permission to read Gmail messages, Google Drive files or Google Groups conversations. You can review or remove the connection in your Google account; this does not automatically delete your Malfoid AI account or its records.

Communications. When you email support, we receive your email address, message and the attachments you send. Account, order or history identifiers help us handle support, refund, privacy, content reports and appeals. Do not send passwords, recovery links, full card numbers or illegal images. Relevant report information is used for investigation and is not published as a public complaint.

Technical information. The hosting and security services process network requests and can receive IP addresses, browser information, timestamps and request metadata. Operational records help diagnose errors and prevent misuse. Our application log settings limit request details and avoid recording detailed customer content. Hosting-platform security records can still contain personal information.

Generation information. A generation request includes your prompt, selected model and image settings, and any reference images you choose to supply. The service records job status, associated credit transactions, provider identifiers, error information and image-storage references so that you can access history and support can investigate failures. Avoid including sensitive personal information in prompts or reference images.

Payment information. We record the account and order identifiers, package, credits, currency, confirmed order amounts, tax and payment or refund status. Checkout payment details are handled by the payment provider. Malfoid AI does not provide a form for collecting full card numbers or card security codes and does not store them in its order records.

How information is used

We use account information to provide sign-in, verification, recovery and security notifications. Service records support your private history, credit balance, confirmed purchases, refunds and customer support. Security information helps prevent unauthorized access, fraud and misuse and investigate reported content. Some records may also be needed to meet applicable legal obligations or resolve disputes.

Where data-protection law requires a legal basis, account and requested service processing is based on providing that service; security and support processing may rely on legitimate interests where permitted, and legally required records on applicable obligations. Optional tracking requires appropriate choices and consent where required. Merely opening this policy is not consent to optional tracking.

Service providers and disclosures

We do not sell account records, prompts or images. Providing an online service does involve processing by the providers described below; this policy does not promise that information never leaves Malfoid AI.

• Cloudflare currently hosts the application, account database and file storage and supports transactional email. It processes information needed to deliver and secure these services. See Cloudflare's privacy policy.
• Google handles Google sign-in when you choose it. Google also processes messages sent to our Google Groups support address, malfoid-support@googlegroups.com. Group conversations and member details are restricted to authorized group owners and managers. Using Google sign-in does not join that support group or grant access to its messages. See Google's privacy policy.
• fal.ai and the selected image-model provider process the prompt, settings and reference images needed for the request. Reference images may be supplied through access links the provider can retrieve. Provider processing and retention are subject to the applicable provider arrangements; this policy does not promise immediate deletion or that every provider excludes all training use. See fal.ai's privacy policy.
• Waffo Pancake handles checkout, payment methods, payment confirmation and refunds. It may collect payment, billing and tax information directly from you. We receive order information needed to attribute the purchase and reconcile credits. See Waffo's privacy policy.

Relevant information may also be disclosed when required by law or necessary to investigate fraud, protect rights or respond to a valid legal request. Service providers can process information outside your country. This policy does not claim a particular storage country or an international-transfer arrangement that has not been confirmed for this service.

Private images and public content

Generation history and generated-image storage are designed to restrict ordinary access to the owning account. Authorized administrators can access relevant records and files for support, security and investigation. They are not automatically submitted to a public gallery. This is separate from a profile avatar, which may be public, and from an image that you download, publish or share yourself. A provider-hosted image link can also have different access conditions from the stored history copy; do not treat possession of a link as a guarantee of secrecy.

Malfoid AI does not run its own model-training feature using your account content. Processing a request by an external model service is governed by that provider's terms and arrangements, rather than a blanket promise in this policy.

First-party traffic counts

We count visits across the AI site, including signed-in pages, to understand overall use. The browser sends only a general page category, without query strings, record IDs, page titles, prompts or account details. The server counts page views, approximate country and estimated daily visitors. For daily deduplication, it computes a keyed, daily-changing value from the connection IP and browser user agent; the traffic table does not store the original IP or user agent and does not join these values to account records. These traffic rows are retained for 30 days and are visible only to authorized administrators. No analytics cookie or local-storage identifier is created for these counts. Shared connections, changing devices, bots or blocked requests can affect estimates.

Cookies and optional analytics

Essential account cookies support sign-in and account security. Browser storage also retains interface choices such as the theme and sidebar preferences. Read the browser storage notice for these functions. Blocking essential cookies can prevent account features from working.

Google Analytics 4 and Microsoft Clarity are optional tools on the public homepage for signed-out visitors who accept analytics. They are not loaded before acceptance, on account or generation pages, or on homepage URLs containing a query or fragment. We do not send account email addresses, prompts, uploaded images or sign-in records to these tools. Use Privacy choices on the homepage to reject or withdraw consent. Withdrawal stops future collection by these scripts and removes supported analytics cookies, but does not delete information already received by the providers. See Google's privacy policy and Microsoft's privacy statement.

The AI service does not currently run Google Ads advertising cookies or personalized-advertising features. Advertising or analytics on the main website is outside the scope of this AI-site policy.

Retention and deletion

Account information is kept to support the account, and service or financial records for the purposes described above. Closing an account or hiding an item in history does not itself erase every database record, stored file, provider copy or investigation record. This service has not established an automatic post-closure deletion schedule; this policy does not promise a fixed deletion deadline that the service cannot currently carry out.

You can ask support to review deletion or retention of information associated with your account. Relevant security, transaction, refund or legal records may need to be retained separately, and we will explain applicable limitations. The provider policies linked above describe their own handling; a request to Malfoid AI does not by itself delete every third-party record.

Your choices and privacy requests

Your account settings allow profile changes and password changes. Self-service account deletion is currently unavailable. To request access, correction, deletion or information about your data, email contact@malfoid.com from your account email, identifying the request without including credentials.

Depending on the law that applies to you, you may also have rights to restrict or object to processing, receive a portable copy of data, withdraw consent where processing relies on it, or complain to a relevant data-protection authority. We may need to confirm account ownership before disclosing or changing personal information. Mandatory rights are not removed by this policy, and withdrawing optional consent does not end essential account or legally required processing.

Security and sensitive information

We use password hashing, account authentication, private-file access checks and separation of the AI service's storage and database from the main website. Verification and recovery links have an expiry; password reset revokes existing account sessions. No online service can guarantee absolute security. Protect your email account and do not share sign-in or recovery credentials.

Do not upload sensitive identity documents or another person's private information as prompts, references or avatars. If a parent or guardian believes a child has provided personal information without the necessary permission, contact support so that the account and information can be reviewed. This policy does not claim that automated age verification is operating.

Policy updates and contact

Changes will be reflected on this page with an updated date. Material changes to data handling will be explained before new optional processing is introduced; a change to the notice is not itself permission to activate a new feature.

Privacy, support and account requests: contact@malfoid.com. Last updated: 9 October 2026.

Content review and purchase confirmation

Prompts, reference images and generated images are processed by Cloudflare Workers AI for content review. We store the decision, short reason, policy/model version, creation identifier and time for support and enforcement. Automated decisions may be wrong; contact support to request review. Purchase confirmations record the signed-in account, selected package, checkout reference, terms/refund notice version and server timestamp. These records support fulfillment, disputes and refund handling under the retention practices above.