Privacy notice

Last updated 26 September 2026

This notice explains what personal data HistoricMe (historicme.app) collects when you use it, why, who we share it with, how long we keep it and the rights you have. We have written it to be read, so please do.

1. Who we are

HistoricMe is run by Hampton.io Ltd, a private limited company registered in England and Wales (company number 15728356). We are the controller of the personal data described in this notice, which means we decide how and why it is used.

For anything to do with your data, email support@hampton.io.

2. What we collect and why

Photos you upload

We use your photo to create the portraits you ask for. Before we store it we remove the hidden information cameras add (such as GPS location). We send the photo to Google's Gemini AI service, which creates the portrait, and we keep a copy so that a portrait's share page can show the before and after.

We do not use your photo to identify you, and we do not use facial recognition. If the photo shows anyone else, you must have their permission to upload it (or be the parent or guardian of a child in it).

Legal basis: performing our contract with you (creating the portraits you request).

Details you type in

Some styles let you add a name, choose masculine or feminine styling, or add other instructions. We include these in the instructions sent to Google to create the portrait and keep them with the portrait record. Legal basis: contract.

Portraits we create

Each portrait is stored twice: a watermarked preview and a full-quality version without the watermark. The preview and your uploaded photo are stored at long, random web addresses that cannot practically be guessed, but anyone who has one of those addresses can open it. The full-quality version is private and only reachable through the download links we send after you pay.

If you share a portrait's link, the page it opens shows the watermarked portrait and your original photo side by side to anyone who has the link. Only share it with people you are happy to show both to.

Orders

When you buy, we collect your email address and record what you bought, the price and currency, the date and time, and the payment reference from Stripe. We also record when you asked for immediate access to your download (and so gave up your right to cancel) and when you agreed to our terms. Stripe gives us the name you enter at checkout.

Your card details go straight to Stripe. We never see or store your full card number.

Legal basis: contract (taking payment and delivering your order) and legal obligation (keeping tax and accounting records).

Emails

We email your order confirmation and download links. We do not send marketing emails. If you email us, we keep the conversation so we can help you. Legal basis: contract, and our legitimate interest in answering you.

Your device and how you use the site

• Server logs. Our hosting provider records technical details of each request, such as IP address, browser and the page requested, to keep the site running and secure. Legal basis: legitimate interests (security and reliability).
• Vercel Web Analytics. Counts page views without cookies and without storing anything on your device. Legal basis: legitimate interests (understanding which pages are used).
• Meta Pixel. Only with your consent. It tells Meta (Facebook and Instagram) that you visited, started a checkout or bought, so we can measure and improve our adverts. Meta may link this to your Meta account and use it under its own privacy policy. Legal basis: your consent.

3. Cookies and similar technologies

We only use optional cookies if you agree. You can change your choice at any time with the "Cookie settings" link at the bottom of every page.

Stripe sets its own cookies on its checkout pages to process payments and prevent fraud. Those are covered by Stripe's privacy policy.

4. Who we share it with

We use the service providers below to run HistoricMe. They may only use your data to provide their service to us (except where we say they act for themselves). We do not sell your data.

• Vercel hosts the website and runs our servers.
• Supabase hosts our database and stores photos and portraits, in London, United Kingdom.
• Google (Gemini API) creates the portraits from your photo and instructions. Under Google's terms for the paid Gemini API, Google does not use this content to improve its products, but may keep it for a limited time to detect abuse.
• Stripe takes payments. Stripe also acts as a controller in its own right for fraud prevention and its legal obligations.
• MailerSend sends our order and download emails.
• Google Workspace hosts our customer support mailbox, and receives the emails you send us.
• Meta Platforms Ireland receives Meta Pixel data, only if you consent to marketing cookies. Meta is jointly responsible with us for collecting and sending that data, and responsible on its own for what it does with it afterwards.

We may also share data with professional advisers, with the police or regulators where the law requires it, or with a buyer if the business is sold.

5. International transfers

Some of these providers, or their sub-processors, are based in or can access data from the United States and other countries outside the UK. When that happens we rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework where the provider is certified) or on the ICO's International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses, which require the recipient to protect your data to UK standards.

6. How long we keep it

• We keep your uploaded photo, the portraits made from it and the details you typed in while your portraits and share links are in use, so that you can come back to buy or download them. Email us and we will delete them sooner.
• We keep order, payment and consent records for six years after the end of the financial year in which you ordered, because UK tax and company law require it.
• We keep emails you send us for up to two years after we last hear from you.
• We use no analytics cookies. Vercel Analytics keeps only aggregated visit counts.

7. Your rights

Under UK data protection law you have the right to:

• get a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted, including your photos and portraits;
• restrict how we use your data, or object to our use of it based on legitimate interests;
• receive data you gave us in a portable format;
• withdraw consent at any time (for cookies, use "Cookie settings"), without affecting what we did before.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

To use any of these rights, email support@hampton.io. It is free, and we will reply within one month. We may ask you to confirm your identity, for example by writing from the email address you used to order. To delete a portrait, tell us the order reference from your email or the portrait's share link.

8. Complaints

If you are unhappy with how we have used your data, please contact us first and we will try to put it right. You can also complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint, telephone 0303 123 1113, or write to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

9. Children

You must be 18 or over to buy from us. HistoricMe is not aimed at children, and photos of children should only be uploaded by their parent or guardian.

10. Changes to this notice

If we change this notice we will update the date at the top. If a change affects how we use data you have already given us, we will tell you before it applies. See also our Terms and Refund policy.