Chat18GPT

GDPR Compliant

Privacy Policy

Last updated: May 2026

This Privacy Policy explains how Chat18GPT ("we", "our", "us") collects, uses, stores, and protects your personal data when you use our Service. We are committed to compliance with the General Data Protection Regulation (GDPR) and French data-protection law (loi Informatique et Libertes).

1. Data Controller

The data controller is Chat18GPT, an individual operator. Contact for all data-protection matters: support@chat18gpt.com.

EU GDPR Representative contact: support@chat18gpt.com.

2. Age Requirement - Data We Do NOT Collect

Chat18GPT is for adults aged 18 or older. The age-gate screen is disabled by default and may be enabled through site configuration. When enabled, it stores a session-scoped confirmation that adult access was acknowledged. We do not receive, store, or process personal identification data (document scans, biometric data, national ID numbers) for age checks. Stronger age verification may be added where required by law, processors, or platform policy.

3. Data We Collect

  • Account data: Email address, display name (if provided), account creation date.
  • Content data: Chat messages, story prompts and outputs, media generation prompts and metadata, image files, and video files stored to your account history.
  • Technical logs: IP address, browser type, request timestamps, and error logs for security, fraud prevention, and service reliability.
  • Payment data: We do not store card data. Token purchases are completed on UrTheProduct and its hosted payment services. Chat18GPT receives only the activation token you submit and stores a one-way hash rather than the raw token.
  • Cookie data: See Section 11 (Cookies).

4. Legal Basis for Processing (GDPR Article 6)

  • Contract performance (Art. 6(1)(b)): Account management, content storage, payment processing, and delivering the features you subscribe to.
  • Legitimate interests (Art. 6(1)(f)): Security monitoring, fraud prevention, abuse detection, and service-reliability logging.
  • Legal obligation (Art. 6(1)(c)): Retaining records required by applicable law, responding to law-enforcement requests, and reporting illegal content where required.
  • Optional marketing communications: Promotional messages where permitted by law.

5. How We Use Your Data

We use your data to operate the Service (account management, authentication, content storage, feature delivery), process payments, enforce our Terms and content policies, detect and prevent abuse, and where required, comply with French and EU legal obligations.

6. Data Sharing

We do not sell personal data. We share data only with:

  • - Authentication and database infrastructure provider: Hosting of user accounts and data (EU-region hosting available).
  • - AI generation infrastructure provider: Prompts are transmitted to generate content; no personal data is sold.
  • - Token checkout providers: UrTheProduct and its hosted payment providers process the external purchase. Their own privacy and payment terms apply to information entered there.
  • - Authorities: Where legally required by applicable law or court order.

7. Data Retention

  • Account and content data: Retained while your account is active.
  • After account deletion: Personal data is anonymised or deleted within 30 days, except where retention is legally required.
  • Security logs: Retained for up to 12 months for fraud and abuse investigation.
  • Payment records: Retained for 10 years as required by French accounting law.

8. Your Rights (GDPR Articles 15-22)

You have the following rights regarding your personal data:

  • Right of access (Art. 15): Request a copy of all data we hold about you.
  • Right to rectification (Art. 16): Request correction of inaccurate data.
  • Right to erasure (Art. 17): Request deletion of your account and personal data. Use the account deletion tool or contact support.
  • Right to data portability (Art. 20): Download a machine-readable export of your data from your account settings.
  • Right to restriction (Art. 18): Request that we limit processing of your data in certain circumstances.
  • Right to object (Art. 21): Object to processing based on legitimate interests.
  • Analytics opt-out: Use Google's browser add-on or block analytics in your browser.

To exercise any of these rights, contact support@chat18gpt.com. We will respond within 30 days. If you are unsatisfied with our response, you may lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertes) at www.cnil.fr.

9. Data Security

We apply appropriate technical and organisational measures: HTTPS encryption in transit, access controls, and secure infrastructure providers. No online service can guarantee absolute security. In the event of a data breach affecting your rights, we will notify you and the CNIL as required by GDPR Article 33/34.

10. International Transfers

Some third-party providers (AI generation, infrastructure) may process data outside the EU/EEA. We ensure such transfers are covered by appropriate safeguards (Standard Contractual Clauses or adequacy decisions).

11. Cookies

We use the following cookies:

  • Required service cookies: Session authentication cookie, an age-gate session cookie when the age-gate feature is enabled (httpOnly, session-scoped, cleared on browser close), and security tokens.
  • Google Analytics: We use Google Analytics to understand how the site is used. It collects pages visited, device and browser type, approximate location (country and city, derived from IP address), and a cookie identifier. Analytics loads automatically for all visitors. You can opt out by using Google's browser add-on or by blocking analytics in your browser.

No advertising cookies are used.

12. Policy Updates

We may update this Privacy Policy. Material changes will be communicated on the platform. Continued use after changes constitutes acceptance of the revised Policy.

13. Contact

For privacy or data-protection questions: support@chat18gpt.com.