Privacy policy

Last updated: 8 October 2026 · See also our Terms.

• In short
• What we collect
• Cookies & analytics
• Who handles it
• How long
• Your rights
• Contact

What we collect and why

The models in our photos are AI-generated people. We don't use anyone's face or likeness, and we don't do face swaps, so please don't send photos of people. We never post your garments or results publicly without your permission.

Cookies, analytics and tracking

• No cookies from us. HangerShot doesn't set advertising or tracking cookies.
• Cloudflare Web Analytics counts page views (page, referrer, browser type, rough country) without cookies and without building a profile of you.
• Campaign tags (UTM). If you arrive through a link with utm_source, utm_medium, utm_campaign or utm_content, we keep those four values in your browser's sessionStorage (cleared when you close the tab). They're added to your order form and passed to Stripe as a reference, so we can tell which post brought an order. They don't identify you.
• Stripe Checkout runs on stripe.com and may use its own cookies for fraud prevention. See Stripe's privacy policy.

Who else handles your data

We don't sell your data or share it for advertising. We use these providers only to run the service:

• Cloudflare: hosts the site, stores uploads and order details (Workers KV), runs Web Analytics. Like any web host it briefly processes technical data such as your IP address to serve pages and block abuse.
• Stripe: payments, receipts and (where offered) subscriptions. Your card details go straight to Stripe; we never see or store your card number.
• Google (Gemini API): generates the AI images from the photos you send. We send only the images and the instructions needed for your order.
• Google (Gmail): our email inbox, if you email us or we deliver by email.
• Meta (Instagram): only if you message us or ask for delivery by Instagram DM.

Some of these providers process data outside the EU, for example in the US. When they do, they rely on safeguards recognised under the GDPR, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

How long we keep it

• Your uploads, the images we make, and the order form entry: deleted 30 days after delivery, or sooner if you ask.
• Questions without an order: deleted within 30 days after we've answered.
• Payment records (name, email, amount, date, Stripe receipt): kept as long as Hungarian tax and accounting law requires (currently up to 8 years).
• Emails and DMs about your order: deleted on request, unless we need them for a legal claim or the records above.

Your rights

Under the GDPR you can ask us to:

• show you the data we hold about you, and give you a copy;
• correct it, or delete it (including your photos, before the 30 days are up);
• restrict or object to how we use it, or move it to another service.

Email [email protected] from the address you ordered with. We reply within one month, usually much sooner. You can also complain to the Hungarian data protection authority, NAIH (Nemzeti Adatvédelmi és Információszabadság Hatóság), or to the authority where you live.

Other things to know

• No automated decisions with legal or similar effects are made about you. AI makes images; a person checks them.
• Age: HangerShot is for adults (18+) and businesses.
• Security: uploads go over HTTPS and are stored in a private store only we can access.
• Changes: if we change this policy we update the date at the top. Big changes that affect existing orders, we'll tell you about.

Who's responsible (data controller)