Privacy

Last updated 2026-05-19.

What we collect

• Account. Email address, optional display name and pronouns, birthday (used to verify 18+ at signup; stored as a date), and any preferences you set.
• Content. Your conversations with personas, persona-generated photos saved to those conversations, and short memory notes derived from your messages.
• Security and analytics events. Sign-ins, rate limits, opt-in toggles, terms acceptance, safety interventions, audit entries, and one device-type / PWA-install event per session for product analytics. Your IP address is stored only as a salted hash.
• Region. Country and US state codes inferred from Cloudflare edge headers at the moment of each request. We use these to enforce age-verification rules in jurisdictions that require them. We do not store precise location.
• Payment data. Handled by CCBill, not Polari. We receive a billing status (active, canceled, charged back) and a CCBill subscription identifier; we never see your card number.

How conversations are processed

Messages are sent to third-party model providers (currently Nous Research, via OpenRouter) to generate replies, and your input is checked by OpenAI's moderation endpoint for safety. Image generation goes to Google (Gemini). Email delivery goes through Resend. Hosting and edge are provided by Cloudflare. We do not sell your personal information and do not use your conversations to train our own models.

Subprocessors

• Cloudflare (hosting, edge, storage)
• OpenRouter and underlying model providers (text generation; currently Nous Research)
• OpenAI (input moderation)
• Google (Gemini, image generation)
• Resend (transactional email)
• CCBill (payment processing)

Their terms and privacy practices govern how they handle the data they receive.

Cookies and local storage

A session cookie keeps you signed in (HTTP-only, secure, same-site). A local storage flag (polari_age_ok) records that you clicked the 18+ gate so it does not re-appear every visit; you can clear it from your browser at any time. Polari does not use third-party advertising cookies or tracking pixels.

AI-generated content

Everything a persona sends, both text and images, is generated by AI. Personas are fictional characters, not real people; no real person is depicted, and any resemblance is coincidental. Polari does not offer explicit (nude/sexual) image generation; images personas send are safe-for-work. Conversations may be sexually explicit between consenting adults once you opt in; that explicit text is part of your conversation and is deleted with your account along with your messages, memories, and embeddings. For technical processing, your messages (explicit or not) are sent to the model provider via OpenRouter and to OpenAI's moderation endpoint, each subject to its own retention policy.

Generated images live in a shared per-persona cache so the same requested scene reuses one image across users (this is what keeps costs and latency reasonable). Because the cache is keyed only by the persona and the scene description, a cached image is not personal data about you and is not deleted when you delete your account; what is deleted is your conversation, including the references to which cached images appeared in it. The same is true for any image an admin curates onto a persona.

Retention

Conversations, memories, and persona-generated images attached to your messages are kept until you delete them or your account. Security and audit events are kept for a reasonable period to investigate and prevent abuse, then aged out. You can delete your account anytime from Settings; this removes your messages, memories, embeddings, and the personal data we store about you.

Your rights

• Access / export. Email support@polari.men to request a copy of your data.
• Deletion. Delete your account from Settings; this is irreversible and removes your messages, memories, and embeddings.
• Correction. Edit profile fields in Settings.

Where local law gives you additional rights (GDPR, UK GDPR, CCPA, etc.), we will honor them and respond to verifiable requests within the time required by the applicable law.

Sale of personal information

We do not sell or share your personal information for cross-context behavioral advertising, and we do not have actual knowledge of selling or sharing the personal information of consumers under 16, as those terms are defined by the California Consumer Privacy Act (as amended by the CPRA). Because we do not sell or share, no opt-out mechanism is required; you may still exercise your access, deletion, and correction rights as described above.

Children's privacy

Polari is for adults only. We do not knowingly collect personal information from anyone under 18 (or the local age of majority). If we learn we have, we will delete the account and the associated data.

International transfers

Polari is operated from the United States and uses Cloudflare's global edge network. Your data may be processed in or transferred to the US or other countries with different data-protection laws than yours.

Security

We use TLS in transit, hash passwords with a modern password hashing function, and store IP addresses only as salted hashes for security-event correlation. No service can promise perfect security; if we learn of a breach affecting your data we will notify you as required by law.

Age

Polari is for adults only. You must be 18 or older (or the local age of majority) to use it.

Updates to this policy

We may update this policy as the service evolves. The “Last updated” date above reflects the latest revision. Material changes will be announced in-app or by email.

Contact

Questions or data requests: support@polari.men.