Privacy policy
Effective November 1, 2026. Ghostface Changer processes information to deliver speech conversion, protect quotas, maintain wallets and answer requests. Contact: support@ghostfacechanger.com.
Audio and output
When you submit a clip, it passes through our Cloudflare-hosted service to ElevenLabs for speech-to-speech conversion using eleven_multilingual_sts_v2. Audio and output are held transiently for the request and are not written to our billing ledger or a hosted audio archive. The output remains in your browser until you remove it, replace it or close or refresh the page, unless you download a copy. Browser recording requires your microphone permission.
ElevenLabs has its own processing, retention and deletion practices; transient handling by our application does not mean immediate deletion from the provider’s systems. Review the ElevenLabs privacy policy. Demo mode returns a fixed tone and does not send audio to a voice provider.
Wallet, technical and payment data
No mandatory registration is required. An HttpOnly wallet cookie lasts up to one year. Your recovery code is a secret granting access to that wallet. The Cloudflare Durable Object ledger stores wallet hashes, hashed network identifiers for UTC daily limits, quota counters, reservations and purchase metadata. Hashing is pseudonymization, not anonymization. It never stores submitted text or audio. Hosting and request diagnostics may include technical information such as IP addresses and timestamps.
Payments are disabled. When activated, WAFFO will process checkout information under its policies; our ledger will record the purchase references and credit allocation, not full card details. No advertising trackers are installed.
Support and processing locations
Support messages are forwarded through Cloudflare Email Routing and handled in Gmail. Messages may include your email address, message content and attachments. Send only what is needed to handle your request. Cloudflare, ElevenLabs, Google and, when activated, WAFFO may process information outside your country under their respective policies.
Retention and security
Wallet and billing records remain until operational cleanup or a verified deletion request, subject to legally required transaction retention. Support correspondence is retained while needed to handle the request and any related dispute, then reviewed for deletion; no fixed automatic deletion schedule is currently implemented. Provider logs and backups follow the respective provider’s retention practices. We use HTTPS and restrict server credentials; no service can guarantee absolute security.
Your requests
Contact support to request access, correction, deletion or portability, or to raise an applicable restriction or objection. We may ask for a transaction reference or other proportionate evidence of control, and respond within the time required by applicable law. Do not email your full recovery code, passwords or card details. Deletion can be limited by transaction-retention or other legal obligations. There is no registered account to close.