Privacy & Biometric Disclosure • Effective June 1, 2026

Privacy Policy & Biometric Protections

Swap Face AI is engineered around data minimization. You never need an account to swap photos, videos, or GIFs—and facial geometry computed during inference stays isolated to your active session rather than feeding public galleries or third-party surveillance databases.

Data Inventory at a Glance Request Data Removal
Data Controller: Swap Face AI Studio Privacy Contact: safety@swapfaceai.io Last Reviewed: November 15, 2026
Section 1 • Transparent Architecture Audit

What Data Swap Face AI Processes — And What We Never Collect

Below is an exact breakdown mapped directly to our web proxy (6-stage inference architecture) and server handlers.

Data Type Purpose & How It Is Processed Scope / Retention
User-Uploaded Photos, GIFs & Videos Transmitted over TLS/HTTPS to execute your selected face swap, head swap, batch ZIP, or morph job (up to 60 MB upload ceiling). Transient inference files & private session history scoped to your browser cookie; never published publicly.
Transient Facial Geometry (106-Point & 512-D ArcFace) Computed ephemerally in server memory by YuNet, 2d106det.onnx, and w600k_r50.onnx strictly to align features onto the target frame. In-RAM only during job execution; immediately discarded once frame compositing finishes. Not archived as biometric templates.
Session Identifier Cookie (ptp_sid) Random 32-char hex ID stored with HttpOnly; SameSite=Lax; Secure flags to separate your workspace history from other users. 30 days browser expiry or cleared immediately upon deleting cookies / clearing session history.
Contact / Takedown Tickets (/api/contact) Name, reply email, category, affected URL, and description voluntarily submitted on Contact Us. Retained only as long as necessary to resolve your technical, DMCA, or safety inquiry.
Passwords, Payment Cards & Ad Profiles Not collected. Swap Face AI does not require accounts, credit cards, or paid subscriptions. None (0 collected).
Sections 2 & 3 • Biometric & Cookie Governance

How Facial Geometry, Consent & Session Cookies Work

Ephemeral Biometric Extraction Only

Jurisdictions such as the Illinois Biometric Information Privacy Act (BIPA), EU GDPR (Article 9), and UK GDPR treat facial geometry scans carefully. Swap Face AI processes facial landmarks and embeddings purely as transient intermediate tensors in RAM to fulfill your active edit request.

  • We do not sell, lease, or trade facial embeddings or user photos to data brokers or advertisers.
  • We do not perform reverse identity lookups or build a searchable facial recognition index.
  • All uploads require your representation under our Terms & Conditions that you hold the right and consent to edit those portraits.

Cookies, HTTPS Transit & Proxy Headers

When you run a job on swapfaceai.io, requests travel over HTTPS to our PHP gateway and encrypted upstream inference worker. Standard HTTP server logs (IP address, request timestamp, HTTP status, and User-Agent) may be recorded temporarily by web infrastructure (Hostinger CDN / Apache) solely for DDoS protection, abuse prevention, and uptime diagnostics.

Our single application cookie ptp_sid isolates your workspace outputs and uses Cache-Control: no-store on API JSON responses so shared proxies never cache your swap results.

Sections 4 & 5 • User Control & Compliance

Your Privacy Rights, Instant Deletion & Safety Standards

Instant Self-Service Deletion

Clear any generated output immediately from your workspace drawer/history panel (which invokes DELETE /api/history/<id> or DELETE /api/history) to sever and wipe your session log.

GDPR, UK GDPR & CCPA Rights

Visitors in the EEA, UK, California, and equivalent jurisdictions may request access, correction, restriction, or erasure of any support ticket or stored resource by contacting safety@swapfaceai.io.

Children's Privacy (Zero CSAM)

Swap Face AI is intended strictly for users aged 13+ (or the applicable digital consent age in your country) and must never be used to upload, alter, or generate exploitative imagery involving minors. Verified violations are purged and reported.

Questions or Urgent Removal Requests?

Contact our Privacy & Safety Desk at safety@swapfaceai.io or use the interactive form on Contact Us. Policy updates are logged clearly with an updated revision date.

Privacy Clarification Q&A

Frequently Asked Questions About Privacy on Swap Face AI

No. Uploaded source/target portraits, videos, and GIFs are sent over encrypted HTTPS solely to run your requested ONNX swap job in transient storage and associate output references only with your private browser session cookie (ptp_sid). We do not sell uploaded faces or publish a public gallery of user uploads.
No. All 13 Swap Face AI tools work without registration, passwords, email verification, or government ID uploads.
Swap Face AI uses a strictly necessary session cookie (ptp_sid, HttpOnly, SameSite=Lax) so you can view and delete your own recent swap history during your 30-day session without colliding with other visitors. We do not sell third-party ad-targeting profiles.
When you run a swap, YuNet, 2d106det, and ArcFace (w600k_r50.onnx) compute temporary in-memory bounding boxes, 106-point geometric coordinates, and a 512-dimensional vector solely for aligning and blending that specific output frame—never for cross-user biometric surveillance or identity indexing.
You can wipe your session history instantly inside any studio page via the history delete control (DELETE /api/history), or email safety@swapfaceai.io / support@swapfaceai.io with your deletion or data inquiry.