CursedPic — Privacy Notice

1. Who is responsible for CursedPic

CursedPic is a small, experimental browser game hosted at cursedpic.com and operated from Malta.

For users in the European Economic Area, CursedPic acts as the data controller for the limited personal data described in this notice.

2. What information is collected

CursedPic is designed to run with as little personal data as possible. There are no user accounts and you are not asked to log in or provide an email address.

However, some information is still collected when you use the site:

  • Prompts and other text you type, such as the head, torso, legs, and feet prompts you enter for a round, and any optional labels or names you choose to use.
  • Images generated from your prompts, which are produced by third party AI models and stored by CursedPic together with your session data.
  • Technical information, such as your IP address, browser type, device type, and basic usage logs (for example, when a session is created or an image is requested).
  • Cookies and similar technologies, set either by CursedPic itself or by third party services like Google that provide AI models, advertising, or analytics.

CursedPic does not intentionally collect names, email addresses, or payment details. If you type personal information into a prompt, it may be processed by the AI model and appear in the generated image or logs, so it is better to avoid including real personal details.

3. How your information is used

The information collected through CursedPic is used for the following purposes:

  • Running the game, for example:
    • Creating and managing sessions.
    • Sending prompts to the AI model and returning images.
    • Letting you and your friends see the generated image for your round.
  • Safety and moderation, including:
    • Automatically rewriting prompts so that they are more likely to be accepted by the image model and avoid harmful content.
    • Blocking abuse and enforcing the rules described in the Terms of Use.
  • Security and reliability, such as:
    • Maintaining server logs to detect errors, prevent attacks, and keep the service stable.
  • Advertising and basic measurement, including:
    • Showing Google AdSense ads and possibly rewarded ads while you wait for images.
    • In the future, using analytics tools to understand overall usage trends in aggregate.
  • Showcasing and reusing creations, such as:
    • Featuring selected prompts and images in public galleries on cursedpic.com.
    • Sharing them on social media or other channels to show how the game works.
    • Using them in marketing materials, demos, or potential commercial products like prints or posters.

Because of this, you should not submit prompts or content that you consider private, sensitive, or that involve real identifiable people.

4. Ads, cookies, and third party services

CursedPic uses third party services to provide key features:

  • Google Gemini or similar AI models to generate images based on your prompts.
  • Google AdSense to display ads, including banner ads and potentially rewarded ads while you wait.
  • Analytics services in the future, to understand how the site is used in aggregate.

Third party vendors, including Google, use cookies and similar technologies to serve ads based on your visits to CursedPic and other sites, and to measure ad performance. Google’s advertising cookies help Google and its partners show ads that are more relevant and avoid repeating the same ad too often.

You can learn more about how Google uses cookies and advertising data in Google’s own privacy and cookie policies.

5. Legal basis for processing (EEA users)

For users in the European Economic Area, the main legal bases for processing data on CursedPic are:

  • Performance of a contract, to provide the service you ask for when you create or join a session.
  • Legitimate interests, such as keeping the service secure, preventing abuse, measuring general usage, and showcasing how the game works.
  • Compliance with legal obligations, if CursedPic needs to keep or share certain data in response to law enforcement or other legal requirements.

6. Data sharing

CursedPic does not sell your personal data. However, data may be shared with:

  • Service providers that host the website, run the AI models, or provide advertising and analytics.
  • Public audiences when prompts and images are displayed in galleries, social posts, marketing examples, or other public channels as described in the Terms of Use.
  • Authorities or legal advisors if required by law or to protect CursedPic’s rights and the rights of others.

These providers and audiences may be located in other countries. Third party providers process data under their own terms and privacy policies.

7. Storage and retention

CursedPic keeps data only for as long as needed for the purposes described above. In practice, this means:

  • Server logs and technical data are kept for a limited time to maintain and protect the service.
  • Prompts and generated images are kept for as long as they are needed to run the game, debug issues, enforce rules, or feature creations in galleries and other showcases.

CursedPic expressly reserves the right to delete or purge generated images, prompts, and sessions at any time, for example to free up storage space or clean up old data. There is no guarantee that any particular image or session will stay available.

8. Your rights

Depending on your location, you may have rights over your personal data, such as the right to access, correct, or delete it, or to object to certain types of processing.

Because CursedPic does not use user accounts or collect email addresses, it is usually not possible to link a specific prompt or image back to a specific individual in a reliable way.

If a direct contact method for CursedPic is added in the future, that will be the place to reach out with privacy questions or to exercise your rights. Any such changes will be reflected in this notice.

9. Children and minors

CursedPic is intended only for users aged 18 or over and is not directed towards children. The service is built on top of AI models whose API terms require that apps using them are not aimed at people under 18.

CursedPic does not knowingly collect information about anyone under 18. If it later becomes possible to contact CursedPic and you believe that data about someone under 18 has been collected, you will be able to request deletion.

10. Changes to this notice

This Privacy Notice may be updated from time to time. The “Last updated” date at the top shows when it was last changed. If the way CursedPic handles data changes in a significant way, that will be reflected here.

This notice is meant as a practical explanation of how this small project handles data. It is not a substitute for legal advice.