Privacy Policy
Last updated: October 19, 2026
This policy describes the personal data HaircutsOff (haircutsoff.com) collects, why it is needed, who else handles it, and what you can do about it.
Who runs this site
HaircutsOff is an independent website run by Serhii Korol, Ukraine ("we", "us"). We decide how the personal data described here is used, which makes us the controller under data protection law. Privacy questions go to support@haircutsoff.com.
In brief
- You can browse coupons, the price archive and the hairstyle gallery without an account.
- An account (Google sign-in) is only needed to read hairstyle prompts and to save or like them.
- We never receive your photos. You attach a photo yourself inside ChatGPT or Gemini, not on our site.
- Payments for premium prompts go through Patreon. We never see card or bank details.
- We use Google AdSense to show ads. Google and its partners may use cookies for that, as explained below.
- We do not sell your personal data and we do not run a separate analytics tool.
Data we collect and why
Google sign-in
Signing in uses Google OAuth through Supabase Authentication. Google shares your name, email address and profile picture with us; your Google password never reaches us. We use these details to create your account, show your name and picture in the site header and on your profile, and unlock the text of free prompts. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Saved and liked hairstyles
When you save or like a hairstyle, we store a record linking your account to that page and the time of the action. Only you can see your own list. Public like totals are plain numbers and do not reveal who liked what. Legal basis: performance of a contract.
View and use counters
Opening a hairstyle page, copying a prompt or pressing "Open with ChatGPT" or "Copy & open Gemini" adds one to an anonymous counter for that page. The counter is not tied to your account or IP address. Your browser keeps a short note in session storage so the same tab is not counted twice. Legal basis: legitimate interests in knowing which hairstyles people find useful (Art. 6(1)(f) GDPR).
Coupon search by ZIP or postal code
If you type a ZIP or postal code on the US or Canada coupon page, it is sent to our server to look up nearby salons and then discarded. We do not save it to your account or build a location history. Clicking "Get Coupon" opens the offer on a third-party website, which has its own privacy policy.
Patreon membership
Premium prompts are unlocked with a Patreon membership. Patreon bills you and processes your payment details under its own privacy policy. When you press "Connect Patreon", Patreon asks you to approve access to your identity and memberships. It then tells us your Patreon user ID and the status, tier and dates of your membership in our campaign. We store the Patreon user ID together with your plan, status and the date your access ends. We do not keep the Patreon access token after the connection step. Patreon notifies us by webhook when your membership changes so access stays correct. Legal basis: performance of a contract. You can disconnect at any time on the Membership page.
Messages you send us
If you email us, we keep your address and message to reply and to keep a record of the conversation. Legal basis: legitimate interests, or contract if you are a member.
Server logs
Our hosting provider, Cloudflare (which sits in front of the site) and Supabase process technical data such as IP address, time, requested page and browser type to deliver the site, block abuse and fix errors. Legal basis: legitimate interests in security and reliable operation. These logs are kept for a limited period set by each provider.
Your photos and AI tools
HaircutsOff publishes text prompts only. There is no photo upload on this site. To try a hairstyle you attach your own photo inside a third-party AI service such as ChatGPT (OpenAI) or Gemini (Google). That service's privacy policy and terms apply to your photo, not ours. We do not create face templates or other biometric data.
Advertising (Google AdSense)
We use Google AdSense to show ads, which helps pay for hosting and for keeping the coupon list current. Ads may appear once Google has approved the site.
- Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to our users based on their visit to HaircutsOff and/or other sites on the Internet. Google's advertising cookies include the DoubleClick cookie.
- You may opt out of personalised advertising by visiting Google Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalised advertising at www.aboutads.info/choices (United States) and www.youronlinechoices.eu (Europe).
- If you opt out, you will still see ads, but they will not be personalised based on your browsing.
Learn more about how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites and about advertising at policies.google.com/technologies/ads.
Consent in the EEA, UK and Switzerland
Visitors from the European Economic Area, the United Kingdom and Switzerland see Google's consent message, a Google-certified consent management platform, before advertising cookies are used. You can accept, refuse or manage your choices there, and change them later through the privacy and cookie settings link that the message provides. If you refuse, Google may still show non-personalised or limited ads, which use fewer cookies.
Who we share data with
We do not sell personal data. These providers help us run the site:
- Supabase: database and authentication (account, saved and liked hairstyles, membership record).
- Google: sign-in provider and, through AdSense, advertising partner.
- Patreon: only if you connect your account.
- Cloudflare and our hosting provider: deliver and protect the website.
- Authorities: only where the law requires it, or to protect our rights and users.
International transfers
We operate from Ukraine, and several providers process data in the United States and other countries. Where the law requires it, transfers rely on safeguards such as the EU Standard Contractual Clauses, the UK addendum or an adequacy decision such as the EU–U.S. Data Privacy Framework.
How long we keep data
- Account data, saved and liked hairstyles: until you delete your account.
- Patreon link and membership record: until you disconnect Patreon or delete your account.
- Anonymous counters: kept indefinitely, as they contain no personal data.
- Server logs: a short period set by each provider, unless needed to investigate abuse.
- Emails: as long as needed to handle your request.
Deleting your account
Signed-in users can delete their account from the profile page. This removes your account, saved and liked hairstyles and the Patreon link. You can also email support@haircutsoff.com and we will do it for you. Cancelling a Patreon payment is done on Patreon (see the Refund Policy).
Your rights
EEA, UK and Switzerland (GDPR, UK GDPR, FADP)
You may access, correct or delete your data, restrict or object to its processing, receive a portable copy, and withdraw consent at any time without affecting earlier processing. You may also complain to your local data protection authority.
California and other U.S. states (CCPA/CPRA and similar laws)
You may ask what personal information we collect, use and disclose, and ask us to correct or delete it. We do not sell personal information for money. Google's use of advertising cookies may count as "sharing" for cross-context behavioural advertising under California law; you can opt out through Google Ads Settings, through a browser that sends a Global Privacy Control signal, or by emailing us. We will not treat you differently for exercising these rights.
To make a request, email support@haircutsoff.com with the subject "Privacy request", ideally from the address linked to your account. We may need to confirm your identity and will reply within the time the law allows.
Children
HaircutsOff is not directed at children under 13 (or the higher age set by local law, such as 16 in parts of the EEA), and we do not knowingly collect their personal data. If you believe a child has created an account, contact us and we will delete it. Some hairstyle prompts describe children's haircuts; they are meant for parents and guardians planning a child's cut. If a parent uses a child's photo with such a prompt, that photo goes only to the AI service the parent chooses, never to us.
Security
The site is served over HTTPS. Database access rules let signed-in users read only their own saved items and membership record. No system is perfectly secure, but we take reasonable steps to protect your information.
Changes
When this policy changes, the "Last updated" date above changes too. Significant changes will be highlighted on the site.
Contact
Serhii Korol, Ukraine. Email: support@haircutsoff.com. Related pages: Cookie Policy, Terms of Use, Contact.