← Back to Oleole

Privacy Policy

Last updated: 25 May 2026

1. What this policy covers

This policy describes how Oleole (“we”, “us”) collects, uses, and protects your information when you use the Oleole web application at oleole.live.

2. The selfie you upload

Your selfie is sent to Google's Gemini image generation API to produce your fan avatar. Because the three additional backdrop styles (Press, Retro, Sponsor) are generated on-demand only after an upgrade, we temporarily store the original selfie in Google Firebase Storage at a path unique to your avatar (avatars/<your-avatar-id>/portrait.jpg) so that those backdrops can be generated when you ask for them.

The selfie is automatically and permanently deleted within 48 hours by a Google Cloud Storage lifecycle policy that we enforce at the bucket level — this happens whether or not you upgrade. You can also request immediate deletion at any time. Request selfie deletion.

Google's data handling for the Gemini API is governed by their API terms and Privacy Policy.

3. The generated avatar

The four backdrop images Gemini produces from your selfie do contain your likeness, so we need to be specific about how they are stored:

  • The four generated JPEG files are uploaded to Google Firebase Storage under a folder unique to your avatar.
  • The metadata for your avatar (country code, jersey type, gender, the custom name and number you chose, storage paths, and payment status) is stored in Google Firebase Firestore.
  • Access to the generated images is granted via short-lived signed URLs (7 days). We do not make the underlying Storage bucket publicly listable.
  • We retain these files so you can return to view, share, and download your avatar. You can request permanent deletion at any time. Request avatar deletion.

4. Payment information

All payments are processed by Stripe. We never see or store your card number, expiry, CVC, or postal code. We only see a Stripe session ID and whether the payment succeeded. Stripe's privacy notice is available at stripe.com/privacy.

5. Analytics

We use Vercel Analytics to count page views and measure performance. Vercel Analytics is cookie-less and does not track you across sites. No personal identifiers are collected.

6. Local storage in your browser

We store a small flag in your browser's localStorage to remember that you have used your free generation and to recover your most recently created avatar. This data never leaves your device. You can clear it at any time in your browser settings.

7. Your rights

If you are located in the EEA, UK, or California, you have the right to access, correct, or delete the personal data we hold about you. To exercise these rights, send us a request from the email address associated with your purchase, or include your avatar URL so we can identify the record. Exercise your data rights.

8. Contact

Questions about this policy? Send us a message.