Legal
Privacy Policy
Last updated: May 2026 · Applies to gfpgaan.com and all GFPGAN services.
Your images never leave your device
GFPGAN processes all photos entirely in your browser using WebAssembly. No image data is ever sent to any server, stored in any database, or shared with any third party — at any point.
This Privacy Policy explains how gfpgaan.com ("we", "us", or "our") handles your personal data when you use the GFPGAN AI face restoration service. We are committed to being transparent about our data practices. The short version: we collect very little, we process nothing on our servers, and we never sell your data.
1. Image Data — Zero Server Processing
The GFPGAN restoration tool runs entirely in your browser using WebAssembly. When you upload a photo:
- The image is loaded into your browser's local memory only
- All processing (face detection, restoration, upscaling) runs locally on your CPU/GPU
- No image data is transmitted to our servers or any third-party server
- The image is cleared from memory when you close or refresh the page
- We have no access to, and no record of, any image you process
This is a deliberate privacy-by-design choice. Face restoration involves sensitive personal images, and we believe the safest approach is to never handle them on a server in the first place.
2. Information We Collect
We collect minimal data necessary to operate the site:
a) Automatically Collected Data
Like most websites, our web server logs basic access information including IP address, browser type, operating system, referring URL, and pages visited. This data is used solely for security monitoring and site performance analysis. It is not linked to your identity and is not used for advertising.
b) Contact Form Data
If you contact us through our contact form, we collect your name, email address, and message content. This information is used solely to respond to your enquiry. We process contact form submissions through Web3Forms, a third-party service. Please review Web3Forms' privacy policy for details on how they handle this data.
c) Analytics
We may use privacy-respecting analytics to understand aggregate traffic patterns (pages visited, approximate geography, browser type). If analytics are active, no personally identifiable information is collected, no cross-site tracking is performed, and no data is sold to advertisers.
3. Cookies
This site uses only functional cookies necessary for the site to operate (such as language preference storage). We do not use advertising cookies, tracking pixels, or third-party marketing cookies. You can disable cookies in your browser settings without affecting the core functionality of the GFPGAN restoration tool.
4. How We Use Your Information
We use the limited data we collect to:
- Operate and maintain the website and restoration tool
- Monitor security and prevent abuse
- Respond to contact enquiries
- Understand aggregate site usage to improve the service
We do not sell, rent, or trade your personal data to any third party. We do not use your data for targeted advertising.
5. Third-Party Services
We use the following third-party services that may process limited data:
- Web3Forms — contact form processing. Data: name, email, message.
- Vercel / CDN — website hosting and delivery. Data: standard server access logs.
We do not integrate Facebook Pixel, Google Ads, or any advertising platform. No data is shared with social networks unless you voluntarily share content from this site yourself.
6. Data Retention
Server access logs are retained for a maximum of 30 days for security purposes, then automatically deleted. Contact form submissions are retained only as long as necessary to respond to your enquiry. We do not maintain a long-term database of user interactions.
7. Your Rights
Depending on your jurisdiction, you may have rights including:
- Access — request a copy of any personal data we hold about you
- Deletion — request deletion of your personal data
- Correction — request correction of inaccurate data
- Portability — request your data in a portable format
- Objection — object to certain processing activities
To exercise any of these rights, contact us at hello@gfpgaan.com. Because we collect so little data, most requests will be fulfilled immediately.
8. Children's Privacy
This service is not directed to children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided personal information through our site, contact us immediately and we will delete it promptly.
9. Security
We implement reasonable security measures to protect the limited data we collect — including HTTPS encryption for all connections, secure hosting infrastructure, and access controls. However, no method of transmission over the internet is 100% secure. By using this service, you acknowledge this inherent limitation.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically. Continued use of the service after changes are posted constitutes your acceptance.
11. Contact
For privacy-related questions, data access requests, or deletion requests, contact us at hello@gfpgaan.com or through our Contact page.