Privacy Policy

1. Introduction

Welcome to IsThisAI ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website isthisai.lol and use our services.

By using our service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Username
• Password (stored securely using industry-standard hashing) - if not using social sign-in
• Auto-generated profile picture (we generate unique avatars for all users; profile pictures from social providers are never stored)
• Profile information you choose to provide

If you sign in using Google, Facebook, or X (Twitter), we receive basic profile information from these services as described in Section 4.4.

2.2 Usage Data

We automatically collect certain information when you use our service:

• Game activity (votes, scores, game sessions)
• IP address
• Browser type and version
• Device information
• Pages visited and time spent
• Referring website

2.3 User-Uploaded Content

When you upload content to our service, we collect:

• The uploaded files (images and videos)
• Content metadata (file hashes, file type, upload timestamp)
• Your IP address at the time of upload
• Terms of Service acceptance timestamp
• Classification information you provide (e.g., whether content is AI-generated)

We store content hashes to prevent duplicate uploads and to enforce our DMCA takedown policy.

2.4 Copyright Strike Information

If your uploaded content is subject to a valid DMCA takedown request, we record:

• The number of copyright strikes on your account
• Details of the takedown request
• Upload ban status (if applicable after multiple strikes)

2.5 Cookies

We use two essential cookies necessary for the service to function:

• Session cookie (isitai_session) — keeps you logged in between page visits
• CSRF cookie — protects against cross-site request forgery attacks

We do not use tracking, advertising, or analytics cookies. Performance monitoring is done server-side and does not involve browser cookies.

3. How We Use Your Information

We use the collected information to:

• Provide and maintain our service
• Create and manage your account
• Track your game progress and display leaderboards
• Review and moderate user-uploaded content
• Process and respond to DMCA takedown requests
• Enforce our Terms of Service and repeat infringer policy
• Send you important service updates
• Respond to your inquiries and support requests
• Monitor and analyze usage patterns
• Detect and prevent fraud or abuse

4. Third-Party Services

We use the following third-party services that may collect and process your data:

4.1 Infrastructure & Hosting

• Hetzner - Server hosting provider (Germany). Your data is stored on servers located in the EU. Hetzner Privacy Policy
• Cloudflare - Content delivery network (CDN), DDoS protection, and asset hosting. Cloudflare may process your IP address and request data. Cloudflare Privacy Policy
• DiceBear - Avatar generation service. When your profile picture is displayed, your browser loads it directly from DiceBear's API (api.dicebear.com), which receives your username (used as the avatar seed) and your IP address. DiceBear Privacy Policy

4.2 Analytics & Monitoring

• Sentry - Error monitoring and performance tracking. Collects error reports and performance data to help us improve the service. Sentry is configured with send_default_pii=false, meaning personal data such as IP addresses and email addresses are not sent to Sentry. Sentry Privacy Policy
• BetterStack - Log management and monitoring. Processes server logs for debugging and security purposes. BetterStack Privacy Policy

4.3 Communications

• Resend - Email delivery service. Used to send transactional emails such as email verification and password reset. Resend Privacy Policy

4.4 Social Authentication

You may choose to sign in using third-party social authentication providers. When you do, we receive limited profile information from these services:

• Google - We receive your email address (used to create or link your account) and name. Profile pictures from Google are not stored; all users receive an auto-generated avatar. Google Privacy Policy
• Facebook - We receive your email address (used to create or link your account). Profile pictures from Facebook are not stored; all users receive an auto-generated avatar. Facebook Privacy Policy
• X (Twitter) - We receive your account identifier. X does not guarantee that an email address is provided; if one is provided and verified, it may be used to link your account. Your X username, display name, and profile picture are not stored; your IsThisAI username is auto-generated and your avatar is auto-generated. X Privacy Policy

We only use this information to create and manage your account. We do not post on your behalf or access additional data beyond what is described above.

5. DMCA and Copyright Information

5.1 Information We Collect for DMCA Requests

When someone submits a DMCA takedown request, we collect:

• Complainant's name, email, physical address, and phone number
• Description of the copyrighted work
• Location of the allegedly infringing content
• Legal declarations and electronic signature
• IP address of the submitter

5.2 How We Use DMCA Information

We use this information to:

• Process and respond to takedown requests
• Remove infringing content
• Notify the uploader of the takedown (if applicable)
• Track repeat infringers
• Comply with legal requirements

5.3 Disclosure to Affected Parties

If your content is subject to a DMCA takedown, we may share the complainant's information with you if you file a counter-notification. Similarly, if you file a counter-notification, your information may be shared with the original complainant.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. You can request deletion of your account and associated data at any time through your account settings.

Some data may be retained for longer periods where required by law or for legitimate business purposes:

• DMCA takedown records: Retained indefinitely for legal compliance
• Copyright strike records: Retained indefinitely to enforce repeat infringer policy
• Banned content hashes: Retained indefinitely to prevent re-upload
• Fraud prevention data: Retained as needed for security purposes

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure password hashing
• Regular security updates and monitoring
• Access controls and authentication

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the following rights:

• Access - Request a copy of your personal data
• Rectification - Request correction of inaccurate data
• Erasure - Request deletion of your data
• Portability - Request your data in a portable format
• Objection - Object to certain processing of your data
• Withdraw Consent - Withdraw consent where processing is based on consent

To exercise these rights, please contact us at [email protected] or use the account settings page.

Note: Certain data (such as copyright strike records and DMCA request data) may be retained even after account deletion where required for legal compliance or to enforce our Terms of Service.

9. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected].

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. Our primary servers are located in the European Union (Germany). We ensure appropriate safeguards are in place for any international data transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

We encourage you to review this Privacy Policy periodically for any changes.

12. Reporting Inappropriate Content

If you encounter inappropriate, mislabeled, or broken content while using our Service, you can report it using our Report page. We review all reports and take appropriate action to maintain a safe and accurate experience for all users.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at [email protected].

For DMCA and copyright matters, please see our DMCA Policy page.