Privacy Policy | DrakePFPs

Who We Are

Our website address is: https://www.drakepfps.com. DrakePFPs is an online visual identity platform dedicated to providing curated profile pictures, anime avatars, and browser-native avatar enhancement tools, owned and operated by DrakePFPs Inc., a registered corporate entity headquartered at 220 W Rincon Ave, Suite 108, Campbell, CA 95008, United States.

We are committed to maintaining the highest privacy standards for all visitors, community members, and clients. This Privacy Policy outlines what information we collect, why we collect it, how it is used, how long it is stored, and your legal rights regarding your personal data.

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Comments submitted to our blog articles, character galleries, or tutorials are moderated to ensure community safety. We strictly prohibit comments containing hateful language, harassment, spam links, malware distributions, or unauthorized promotions.

Media & Image Uploads

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies & Local Storage

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select Remember Me, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Types of Cookies We Use

• Strictly Necessary Cookies: Essential for site navigation, security token validation, and basic session management.
• Preference & Functionality Cookies: Remembers your dark or light mode preference, circular preview grid toggles, and tool settings.
• Analytics Cookies: Aggregated, anonymized statistics (such as page view counts and referrers) that help us determine which character categories need fresh updates. We do not track individual users across unrelated third-party websites.

Embedded Content from Other Websites

Articles on this site may include embedded content (e.g. videos, images, articles, interactive widgets, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website. We encourage you to review the privacy policies of external platforms (such as YouTube, X or Twitter, or Pinterest) when interacting with embedded media.

Client-Side In-Browser AI Tool Architecture: Zero Server Data Storage

A core foundational pillar of DrakePFPs's privacy philosophy is our Zero-Server Image Architecture. Traditional image editing websites upload your photos to external cloud clusters, exposing your personal selfies, photos, and creative art to server logs, potential leaks, and unauthorized AI training.

Our co-founder and tech lead, Mian Zain, specifically designed our AI tools, including the AI PFP Enhancer, PFP Background Remover, AI Portrait Generator, Emoji Maker, and Face Shape Detector, to run 100% locally inside your browser via HTML5 OffscreenCanvas, CSS image filters, and WebAssembly:

• No Cloud Transmissions: When you select an image file from your device, it is read into your browser's local memory using the HTML5 File API. The binary image bytes are never transmitted across the network to DrakePFPs servers.
• No Server Logs or Databases: We do not log, inspect, store, or cache your uploaded photos on any server infrastructure.
• Instant Purge on Tab Close: All pixel manipulations occur in volatile browser memory. As soon as you navigate away, refresh, or close the browser tab, all temporary image data is permanently destroyed.
• No Machine Learning Harvesting: Your personal photographs are never used to train, fine-tune, or validate generative artificial intelligence models.

Who We Share Your Data With

If you request a password reset, your IP address will be included in the reset email.

We do not sell, rent, trade, or monetize your personal information to data brokers, marketing agencies, or advertising networks. We only share data with trusted third-party service providers strictly necessary to operate our website:

• Infrastructure & Hosting: Cloud hosting and content delivery network (CDN) providers that serve cached static assets with SSL and TLS encryption.
• Automated Spam Prevention: Comment verification services that analyze user agent and IP strings to filter abusive bot spam.
• Legal Compliance: If required by valid court order, subpoena, or applicable state or federal law, we may disclose minimal necessary data to law enforcement authorities.

How Long We Retain Your Data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

Server access logs (containing visitor IP addresses, browser types, and timestamped page requests) are automatically purged every 30 days and are maintained strictly for network security and DDoS mitigation.

What Rights You Have Over Your Data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

To exercise any of these rights, simply email our data compliance desk at contact@drakepfps.com. We fulfill verified data export and deletion requests within 30 calendar days at zero cost to the user.

Where Your Data Is Sent

Visitor comments may be checked through an automated spam detection service. This service analyzes comment text, IP addresses, and user-agent fingerprints against global spam databases to prevent malicious injection attacks and bot spam.

California Consumer Privacy Act (CCPA and CPRA) Disclosures

For residents of the State of California, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides specific statutory rights regarding personal information:

• Right to Know & Access: You have the right to request disclosure of the specific categories of personal information we have collected about you over the preceding 12 months.
• Right to Delete: You have the right to request the deletion of your personal information, subject to limited statutory exceptions.
• Right to Non-Discrimination: We will never deny services, charge different prices, or provide a lower quality of experience for exercising your statutory privacy rights.
• No Sale of Personal Data: DrakePFPs does not sell, share, or transfer personal information for cross-context behavioral advertising. We have not sold personal data in the preceding 12 months.

General Data Protection Regulation (GDPR) Compliance (EU and EEA)

If you reside in the European Economic Area (EEA), United Kingdom, or Switzerland, processing of your personal data is governed by the General Data Protection Regulation (GDPR). Our legal bases for processing data include:

• Consent: When you voluntarily submit a comment, contact inquiry, or custom avatar brief.
• Legitimate Interests: To protect our platform from fraud, spam, and security vulnerabilities, and to ensure high site performance.
• Legal Obligations: Compliance with mandatory administrative and accounting record retention laws.

Children’s Privacy (COPPA Compliance)

Protecting the privacy of young children is especially critical. DrakePFPs does not knowingly collect, solicit, or maintain personal information from children under the age of 13. If we discover that a child under 13 has provided personal data without verified parental consent, we take immediate steps to permanently delete that information from our records. If you are a parent or legal guardian and believe your child has submitted personal data to DrakePFPs, please notify us immediately at contact@drakepfps.com.

Third-Party Platform Interoperability (Discord, Steam, Instagram, TikTok)

When you download an avatar or profile picture from DrakePFPs and upload it to third-party social media or gaming networks, the handling of that image on those platforms becomes subject to their respective terms of service and privacy policies:

• Discord: Avatars uploaded to Discord are hosted on Discord's content delivery servers (CDN). While DrakePFPs strips all EXIF metadata prior to export, Discord may generate multiple image caches and thumbnails across their mobile and desktop clients under the Discord Privacy Policy.
• Valve Steam Community: Steam avatar uploads are public across Steam Community profiles, friends lists, and in-game scoreboards. Steam processes avatar images under the Valve Privacy Policy.
• Meta (Instagram & Facebook): When you update your profile photo on Instagram or Facebook, Meta processes the image under their Meta Privacy Policy, which may include automated facial feature tagging if enabled in your personal account settings.
• ByteDance (TikTok): Profile photos uploaded to TikTok are displayed publicly on video feeds and comment sections, governed by the TikTok Privacy Policy.

DrakePFPs has no control over how external social platforms store, cache, or distribute images once you upload them to your personal accounts. We encourage users to configure their privacy and profile visibility settings directly within each respective platform.

Data Security & Technical Safeguards

We employ industry-standard technical, organizational, and physical security measures to safeguard user data against unauthorized access, alteration, disclosure, or destruction. All communications between your web browser and DrakePFPs servers are encrypted using Transport Layer Security (TLS 1.3) with modern cryptographic cipher suites. Our servers are hosted in SOC 2 Type II certified data centers with around the clock biometric physical security, DDoS protection, and automated intrusion detection.

Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at our discretion to reflect evolving legal requirements, new browser tools, or changes in our operational procedures. When updates are published, we will revise the Last Updated date at the top of this document. We encourage visitors to review this page periodically to remain informed about how we protect community data.

Contact Us for Privacy Inquiries & Data Requests

If you have any questions, concerns, or requests regarding this Privacy Policy, your personal data, or our client-side image processing architecture, please contact our designated Data Protection Officer: