Privacy
Your photos are not stored, unless you share your roast. Your browser shrinks the photo and sends it to our server only to generate the roast. We pass it through OpenRouter to an outside provider that writes the roast, using only providers that don't keep the data or use it for training. Apart from sharing (below), we don't save it anywhere.
Sharing. When you share your roast to Facebook, X, WhatsApp or through More…, we store the share card: an image of your photo with the roast on it, plus its opening line and hook as text. It gets its own public link: anyone with the link can see it, and social networks show it in the link preview. We keep it until you ask us to remove it. The card goes through the automated content check too, and is deleted if flagged. Sharing to Instagram or TikTok, or saving the image, stores nothing. To have a shared card removed, send us its link.
Content check. Before roasting, an automated check looks at each photo for inappropriate content, such as nudity or violence. It runs through OpenRouter under the same rule: only providers that don't keep the data or use it for training. It only answers "safe" or "unsafe"; nothing is saved, no person looks at your photo, and a flagged photo is simply not roasted.
The photo stays in your browser tab so the full roast works after payment. Closing the tab deletes it.
Payments are handled by Stripe. We never see your card details. Stripe tells us whether the payment succeeded, and we keep the generated full roast for 30 days so you can reload it.
To give you one free punchline and to limit abuse, we count roasts per visitor for up to a day using a scrambled (hashed) version of your IP address; we never store the address itself. Your browser also remembers that you used your free roast. If you buy a bundle, your browser keeps a random ID and we store only how many roasts are left on it, for up to a year. Clearing your browser data removes the ID, and with it the remaining roasts, unless you signed in.
Signing in with Google or Apple is optional. We only receive the account's anonymous user ID, never your email address or name, and store a scrambled (hashed) version of it linked to your remaining roasts. A secure cookie keeps you signed in for up to a year; signing out removes it.
The free version is paid for with ads from Google AdSense. Google and its partners may use cookies or similar technology to show ads and measure them, based on your visit here and elsewhere. Visitors in the EU, EEA, UK and Switzerland are asked for consent first, and can change that choice at any time through the privacy link Google adds to the page. See how Google uses information from sites that use its services and turn personalised ads off at Google Ad Settings. Ads never see your photo or your roast.
Only upload photos of yourself, or of people who agreed to be roasted. You must be 18 or older.
Contact: info@roastmypicture.com