Faceventure Privacy Policy

Last updated: November 3, 2026

This policy explains what personal data the Faceventure app and its server (together "Faceventure") collect, why, how long we keep it, and what rights you have.

Who we are

Faceventure is provided by Cloudforge Oy, Kalkunkatu 11, Finland ("we", "us"). We are the controller of your personal data. You can reach us at support@cloudforge.fi.

What we collect

Account details: your name, email address and password. The password is stored only as a one-way hash, so nobody can read it. If you continue with Google instead, Google tells us your name, email address and Google account ID; we do not get your Google password or anything else from your Google account.
Your face photo: the photo you upload on your profile. Faceventure puts this face into the pictures you choose.
Images you create: the face swap pictures made from your face photo.
Credits: your credit balance and a record of credits added and used.
Reports: if you report a picture, we store which picture it was, your account and the reason you chose, so we can review it.
Emails we send you: a copy of each message we write to you, so we know what we have told you.
Server logs: when the app talks to our server, the server records your IP address, the time, the address requested and the app's identification (user agent). Errors are logged too, so we can fix them.

The app uses your camera or photo library only when you choose a face photo. It does not collect your location or contacts, and it contains no advertising, analytics or tracking tools. The app does not use cookies. It keeps you logged in by storing a login token in your device's secure storage until you log out.

How we use it

To provide Faceventure: your account and login, your free weekly credits, and making your face swaps.
To make a face swap: our server finds the face in your face photo and in the chosen picture, and calculates a temporary description of your face that is used only to create that image. This description is not stored and is not used to recognise or identify you.
To keep Faceventure working and secure: server logs help us fix errors and stop misuse.
To answer you when you contact us.
To email you about your account: password reset links you ask for, and messages about your account or about Faceventure itself, such as changes to the service or to this policy. We send these from our own server.

We do not sell your personal data, use it for advertising, or send newsletters or marketing email.

Under the EU General Data Protection Regulation (GDPR), we process your data to provide the service you signed up for (Article 6(1)(b)). We keep server logs because we have a legitimate interest in keeping the service secure and working (Article 6(1)(f)).

Who can see your data

Your face photo and the images you create are shown only to you in the app. They are stored as files on our server at unlisted, random addresses. Anyone who has the exact address of an image can open it, so share image links with care.
Faceventure administrators at Cloudforge Oy can see your account details, credits and pictures, to run the service, help you and handle reports. They can block an account that is misused.
Our hosting provider: our server is hosted by Contabo GmbH, a German hosting company. Face swaps are made on that same server; your photos are not sent to any other company.
Backup storage: backups are encrypted on our server before they are stored with Wasabi Technologies in the EU (Amsterdam). Wasabi cannot read them.
Authorities, if the law requires us to disclose data.
Google, only if you choose to continue with Google: Google confirms who you are to us. We do not send Google your Faceventure data.
A buyer or successor, if Cloudforge Oy or Faceventure is sold or merged. This policy would continue to apply to your data.

How long we keep it

Account details, credits and images you create: until you delete your account.
Your face photo: until you replace it or delete your account. A replaced photo is deleted from our server.
Server logs: deleted after 14 days.
Emails we send you: copies are kept until you delete your account.
Reports: until we have reviewed them. If you delete your account, your reports stay but no longer show who made them.
Backups: encrypted nightly backups of the database and of uploaded images are kept for at most 12 months. Data you delete disappears from them as they expire.

Deleting your account

In the app: open My Profile, choose Delete account and confirm with your password. Your account is deleted immediately, together with your face photos, the images you created, your credits and your logins on all devices.

Without the app: email support@cloudforge.fi from the email address of your account and ask us to delete it. We delete it within 30 days and confirm by email.

To delete single images without deleting your account, contact us.

Your rights

Under the GDPR you have the right to:

see the personal data we have about you, and get a copy of it
have incorrect data corrected
have your data deleted
restrict or object to how we use it
receive your data in a machine-readable format

To use these rights, contact support@cloudforge.fi. You can also complain to the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi).

Children

Faceventure is not intended for children under 13, and we do not knowingly collect their data. If you believe a child under 13 has given us personal data, contact us and we will delete it.

Security

All traffic between the app and our server is encrypted (HTTPS). Passwords are stored only as one-way hashes, access to the server is restricted, and administrators must log in with a second factor. No method of storing or sending data is completely secure, but we work to protect your data.

Changes to this policy

When we change this policy, we publish the new version on this page and update the date at the top.

Contact

Cloudforge Oy, Kalkunkatu 11, Finland support@cloudforge.fi