Privacy Policy

What this release does

You can browse and download the public gallery without an account. Personalized uploads, generation, and checkout are optional and operate only when their website controls are enabled. We do not receive a photo merely because you browse the gallery or select a file locally before submitting it. There is no newsletter form.

Google Tag Manager is configured for optional analytics. It is not loaded until you accept analytics cookies. Rejecting optional analytics does not affect browsing or free downloads. We do not enable advertising consent or session replay in this gallery.

Technical requests

Our hosting provider, Cloudflare, processes technical request information, which may include IP addresses, browser information, and request logs, to deliver and secure the website. Its processing is governed by its own privacy documentation.

We do not promise a specific deletion period for hosting-provider logs. We do not publish visitor information or add it to the public image manifest.

Optional analytics and your choice

If you accept analytics, Google Tag Manager may load analytics tags configured for this site. Those services may process public-page visits, referring sites, browser and device information, and technical request information. A Tag Manager container does not itself confirm that a Google Analytics property is configured or receiving data.

Our site-provided data layer excludes search text, account identifiers, uploaded photos, prompts, and payment details. The container is not loaded on gallery search-result URLs or private, account, upload, and checkout paths. Advertising storage and personalization consent stay denied.

Use Cookie preferences in the footer to change your choice. Withdrawing analytics reloads the page without the container and clears matching analytics cookies that this site can access. Your consent choice is stored for up to 182 days. Google’s privacy policy is available at https://policies.google.com/privacy.

Your device and messages

Downloaded images are saved by your browser to your device. The gallery stores your privacy choice. Optional analytics cookies may be set after consent; the free gallery does not need account or advertising cookies.

If you contact us, the information you send is used to respond and resolve the issue. Please do not send passwords, identity documents, or private photographs.

Optional accounts

When account registration is available, we store your display name, email address, a one-way password hash and session records in our independent Cloudflare database. We do not store your plain-text password. Registration does not verify that you own the email address.

Account sign-in uses a secure HttpOnly session cookie lasting up to 30 days. Signing out revokes that session. Contact support to request account-data access or deletion. Do not send your password. Automatic password-reset emails are not enabled.

Your personal data rights and requests

You may ask to access or receive a copy of personal data we hold about you, correct inaccurate or incomplete personal data, or request deletion of your personal data. Send your request to support@holidaypfp.com, using the subject “Privacy request”, or use the contact details on our Contact page. An account is not required to make a request.

Explain whether you want access, correction, or deletion and identify the relevant account email or support conversation, if any. We may ask for proportionate information to verify your relationship to the data before disclosing or changing it. Do not send your password, full payment-card details, identity documents, or private photographs in the initial request.

We assess and respond to requests in accordance with applicable law. Some information may need to be retained for legal, security, or abuse-prevention purposes; where a request cannot be fully fulfilled, we will explain the applicable reason. We may be unable to identify anonymous browsing records from an email address alone. Hosting-provider logs and data outside our control are subject to the relevant provider’s processes, so a request is not a promise of immediate deletion of every technical log.

You can separately withdraw optional analytics consent at any time using Cookie preferences in the footer. Withdrawing consent does not require an account and does not prevent free gallery downloads.

Personalized uploads and generation

When you choose a JPEG, PNG, or WebP adult portrait in the enabled website generator, your browser checks its size and dimensions and re-encodes it as PNG before submission. Before content moderation or private storage, the server independently validates the submitted PNG, its size and pixel count, and removes embedded metadata. It also checks account ownership and upload validity. Uploaded photos and generated results are stored privately with Cloudflare, separately from the public gallery.

RunningHub.ai processes the necessary reference image and our server-selected Christmas style prompt to generate an image. OpenAI processes images and relevant prompts for automated content moderation. Safety checks cover submitted material and generated output; unavailable or uncertain checks block delivery. This is not a promise of perfect detection or human review of every image.

Upload references have a 24-hour validity window. Generated results have a 7-day access window, with their actual expiry shown in the generator. Personalized generation must remain disabled until independent cleanup maintenance is enabled. Access is denied after expiry. Enabled cleanup removes expired media asynchronously; storage faults or recovery work can delay deletion. We do not promise that every stored copy disappears at the exact expiry instant or that third-party technical logs follow the same schedule.

Image allowances and abuse prevention

Personalized features use necessary session and signed device cookies, keyed hashes of normalized account email addresses, and IP-based rate-limit buckets to enforce ownership, lifetime free-preview allowances, and abuse prevention. These are functional controls, not advertising identifiers.

Account deletion does not reset an already-used lifetime allowance. Limited pseudonymous abuse-prevention records may be retained where needed for security or lawful abuse prevention, subject to applicable data rights. Private photos, account details, and payment information are not added to the public gallery manifest or optional analytics data layer.

Credit purchases and payment providers

When checkout is enabled, Waffo handles the hosted payment flow. We send the account reference, email address, selected pack, and order details needed to associate a purchase with your account. Waffo processes checkout and payment information under its own terms and privacy documentation.

Our independent database records order references, amounts, currency, payment and refund status, and credit transactions. We do not collect full card numbers or card security codes on HolidayPFP. Financial records may need to be retained for applicable legal, accounting, fraud-prevention, or dispute-handling requirements.