Privacy at Artlist

1. There is no account

Artlist has no sign-up, no login and no user record. Nothing you do here is stored against a person, because there is no person-shaped record to store it against. That single fact shapes the rest of this policy, including the section on data requests at the end.

2. What is collected

• Prompt text. The description you type is sent to an AI image provider so a picture can be rendered, and may be retained briefly to debug failures and detect abuse. It is not linked to a name or an account, because none is collected.
• Anonymous, aggregate usage analytics. Page-view counts, which pages get visited, rough referrer and country, device class. These are read as totals and trends, never as a profile of one visitor, and they are not sold or shared for advertising.
• A human check token. Cloudflare Turnstile runs when you generate. It sets its own token to confirm the request came from a browser rather than a script, and reports a pass or a fail. It is a gate, not an identity.
• Standard server logs. Requests are logged the way any web server logs them: timestamp, requested path, response code, user agent, IP address. Logs exist to keep the service running and to stop abuse.

An IP address is the closest thing to an identifier in that list. It arrives with every internet request and cannot be discarded before it is seen. It is used for security, rate limiting and coarse geography, not to follow you around.

3. What is not collected

• No name, no username, no password.
• No email address, unless you write to the address on the contact page. Then we hold your message and whatever address it came from, nothing more.
• No account, no history, no saved gallery of your images.
• No payment data of any kind. The site is free and takes no payments, so there is no card, no billing address and no processor involved.
• No advertising profile, no ad network, no retargeting pixel.
• No cross-site tracking and no attempt to recognise you on other websites.
• No uploads. The generator takes text; it has no file input, so images from your device are never sent here.

4. Keep personal information out of prompts

Prompt text leaves your browser and reaches an outside model provider, so treat it as you would any text typed into a public tool. Keep names, addresses, account details and confidential work material out of the box. The safest way to keep something private is not to type it.

5. Who else is involved

A generation touches a small number of external services, each doing one job:

• An AI image provider. Receives the prompt text, renders the picture, returns it. This is the only third party that sees what you wrote.
• An analytics provider. Receives page-level events in aggregate so traffic can be measured. It is not given prompt text.
• Cloudflare. Sits in front of the site for delivery and protection, and provides the Turnstile human check that guards the generator.

Each operates under its own privacy terms and its own retention rules, which are outside our control. No other party is given access to what happens on this site, and nothing collected here is sold.

6. Cookies and local storage

The site uses no advertising cookies and carries no third-party trackers. What storage exists is limited to two purposes: the human check, which sets its own token so a cleared challenge is not repeated on every request, and analytics, which may set an anonymous identifier so one visit is not counted several times. Clearing it locks you out of nothing, because there is nothing to be locked out of.

7. How long things are kept

In general terms: server logs and prompt records are kept for a short operational period, long enough to investigate a failure or an abuse pattern, then rotated out. Analytics are kept as aggregate counts, which stop describing any individual visit almost immediately. Email sent to the contact address stays in the mailbox until the exchange is finished. Nothing is archived for advertising, resale or profiling.

8. Children

Artlist is not directed at children and collects nothing that would identify one. Nobody too young to accept the terms of use should use the generator without a parent or guardian involved. If you believe a child has sent personal information to the contact address, write to us and the message will be removed.

9. What no account means for data requests

This is where Artlist differs from most privacy policies, so it is written plainly. With no login and no user record, there is no way to look up "your" data, and a request to export or delete it cannot be honoured in the usual sense. Nothing here is filed under your identity, and no reliable test exists to show that a given prompt or log line is yours rather than somebody else's on the same network. Building one would mean collecting more about you, not less.

In practice: prompt records and logs age out on their own without you doing anything; images are never stored against you, since the file goes straight to your browser; and anything you send to the contact address can be deleted on request, because that message does belong to a known sender.

10. Changes to this policy

If the flow changes, whether that is a different provider, a different check or something new being collected, this page changes with it and the date at the top is updated. The version on this page is always the one in force.

11. Contact

Questions about privacy go to the address on the contact page. Note the obvious trade: writing to us reveals your email address, which the generator itself never learns.