Privacy Policy
What data Ozil AI collects when you create a goal video, how we use it, and the choices you have
Last updated: October 17, 2026
This Privacy Policy explains how Ozil AI ("we", "us") collects and uses personal data when you use our website to create AI-generated goal videos, and what controls you have over that data. Ozil AI is an independent fan project and is not affiliated with, endorsed by, or sponsored by Mesut Özil, any club, league, or broadcaster.
Who We Are (Data Controller)
Ozil AI is operated by an individual as a personal project. The controller responsible for your personal data is Ozil AI, and for every privacy matter — including requests to access or delete your data — you can reach us at support@ozil-goal.net. We have not appointed a separate Data Protection Officer; the contact above handles all privacy requests.
Information We Collect
- Account information. You can sign in with Google or with an email address. We store your email address, your name, and — if you sign in with Google — the profile picture your Google account provides. Your password is stored only as a hash, never in plain text.
- Photos you upload. The photo you choose as the subject of a video.
- Video and render records. The videos generated for you, plus the status and outcome of each render request.
- Order information. Payments are handled by Waffo Pancake, our PCI-DSS compliant payment processor. We only receive order-level details like the pack, amount, and status. Your card number is never visible to us.
- Technical and usage data. IP address and browser details recorded for security, and basic analytics such as which pages are visited and on what kind of device.
- Messages you send us through the contact form or by email.
How Your Photo Is Processed
- When you start a render, your photo is sent to apimart.ai — the third-party AI service that generates your video — and used solely for that render task. The upload link we create for it expires after about 72 hours, and we do not keep a copy of your photo in our own storage.
- The finished video is saved to cloud storage (Cloudflare R2) so you can download it again later.
- We never use your photos or videos to train AI models.
- You can ask us to delete your videos or your entire account at any time via our contact page.
How We Use Information
| Purpose | Legal basis |
|---|---|
| Providing and maintaining the service | Performance of a contract |
| Billing and payment processing | Performance of a contract |
| Customer support | Performance of a contract / legitimate interests |
| Service messages (billing, security, policy updates) | Legitimate interests |
| Security and fraud prevention | Legitimate interests |
| Product improvement and analytics | Legitimate interests |
| Compliance with legal obligations | Legal obligation |
| Marketing emails — only if you opt in (see "Marketing Emails") | Your consent |
We may also process aggregated or de-identified data for statistics; such data cannot be linked back to you.
We do not sell your personal information, and we do not use it for targeted advertising.
Cookies and Analytics
We use strictly necessary cookies to keep you signed in; these cannot be switched off. We also use Google Analytics to understand how the site is used. You can block analytics cookies in your browser settings, or opt out of Google Analytics entirely with Google's opt-out add-on.
Who We Share Data With
We only share data with service providers that help us run Ozil AI, and only for that purpose:
- apimart.ai, which renders your video (it receives your photo and the render request);
- Cloudflare, which hosts the site and stores generated videos;
- Waffo Pancake, which handles checkout and refunds;
- Google, if you choose to sign in with Google (and for Google Analytics);
- Resend, which delivers our emails.
If this project is ever transferred to someone else or wound down, we will notify you in advance and make sure these protections carry over.
We may also disclose information when required by law, or to protect our users, the public, or the service itself.
Security
We protect your data with TLS/HTTPS in transit, hashed passwords, least-privilege access to production systems, and video storage in Cloudflare R2. No transmission or storage method is completely secure, but if a security incident ever affects your rights, we will notify you and the relevant supervisory authority without undue delay — within 72 hours where the law requires it.
Data Retention
- Account information is deleted immediately when you delete your account (you can do this in Settings → Security).
- Generated videos are kept so you can re-download them, until you delete them or delete your account.
- Order records are kept for as long as tax and accounting rules require (commonly up to 7 years), even after account closure.
- Support messages are kept for up to 2 years.
- Technical and security logs (including IP addresses) are kept for up to 12 months.
Your Rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, reach us through our contact page — we will respond within 30 calendar days. You may also lodge a complaint with your local data protection authority.
Marketing Emails
We only send marketing emails — such as product news or offers — if you explicitly opt in. You can subscribe or unsubscribe at any time in Settings → Notifications, or by clicking the unsubscribe link in any of our emails. Opting out never affects essential service messages such as receipts, security alerts, or policy updates.
International Transfers
Our service providers — including Cloudflare, Google, apimart.ai, Waffo Pancake, and Resend — may process data in countries other than your own, such as the United States or Singapore. When data crosses borders, we rely on the safeguards in our providers' data processing agreements, which incorporate the EU Standard Contractual Clauses (SCCs) or equivalent protections.
Children
Ozil AI is intended for users aged 18 and over. Do not upload photos of anyone under 18. If we learn that we hold data from a minor, we will delete it.
Third-Party Links and Services
Our site may link to third-party websites or embed third-party services. This policy only covers data we collect directly; we are not responsible for how third parties handle your data, so please review their policies before using them.
Changes to This Policy
If we make a material change to this policy, we will announce it on this page — and by email to your registered address — at least 15 days before it takes effect, and update the "Last updated" date above. Continuing to use the service after the effective date means you accept the updated policy.
Contact
Questions about this policy? Email support@ozil-goal.net or reach us via our contact page.