← Back to FanTranslator

Privacy Policy

Last updated: August 2026

AI processing notice: FanTranslator translates your messages using an AI language model, either our own self-hosted model or, for active paid-plan accounts, a third-party AI provider. Every message you send or receive through the Service, both the original text and its translation, is processed automatically, without human review before delivery. See Section 3 below for exactly which provider processes your messages and where.

1. Data We Collect

  • Your Fanvue user UUID and public username (from Fanvue OAuth)
  • Your email address (optional, from Fanvue profile)
  • The content of chat messages exchanged with fans, and their translations
  • Detected fan language and your chosen translation language
  • The fan's public handle, display name and avatar (shown in your inbox so you know who you're talking to)
  • Support ticket subject/message, if you contact support
  • Billing events synced from Fanvue's App Store webhooks: payment and payout IDs, amounts, and which plan or credit pack they relate to, used only to grant or revoke translation credits and plan access. Fanvue remains the processor of your actual payment method; we never see or store card details.
  • Interface preferences (theme, sound, dashboard language), stored locally in your browser, not on our servers

2. OAuth Scopes

We request only the following Fanvue OAuth scopes, plus offline_access / offline so we can refresh your session without asking you to reconnect constantly:

  • read:self: to identify your account
  • read:chat: to receive incoming fan messages
  • read:fan: to show who a fan is (handle, name, spender status) in your inbox
  • write:chat: to send your translated replies

In practice, this means FanTranslator only ever reads and sends the text of your DM conversations. We cannot view, download, or store photos, videos, or audio messages, media stays entirely inside Fanvue. We also have no ability to moderate, delete, or otherwise manage your content or your account; the scopes above do not grant that, and we do not request it.

3. AI-Powered Translation

Every message that needs translating, both what a fan sends you and what you write back, is sent to an AI language model for processing. If you're on the Free plan, that model is a self-hosted Qwen2.5 instance that we operate ourselves, hosted in Madrid, Spain (EU). If you're on an active Starter or Creator plan, translation is instead routed to Fireworks AI, Inc. (api.fireworks.ai), a third-party AI inference provider based in the United States, chosen for lower latency. This happens automatically, in real time, without a human ever reading or reviewing the message first. Original and translated text are both stored so your conversation history stays in sync across devices. Message content is never used to train any model, and is not shared with third parties beyond what is strictly required to generate the translation itself.

4. Data Sharing

We do not sell your data. It is shared only as required to operate the service: Supabase (database), Upstash (rate limiting), and, to generate translations, either our own self-hosted AI model (Madrid, Spain) or, for active paid-plan accounts, Fireworks AI, Inc. (api.fireworks.ai, United States).

5. Data Retention & Deletion (GDPR)

You may delete your account at any time from the Settings page. This immediately signs you out and stops any further translation of new messages for that account. Your data, messages, conversations, support tickets, and billing/credit history is then permanently and irreversibly erased within 30 days; we keep that short window only in case the deletion was triggered by mistake. You may also request data export by emailing support@stellorns.xyz.

Raw webhook delivery logs (the technical record Fanvue sends us for each event) are kept for at most 90 days for security and troubleshooting purposes, independent of account deletion, and then deleted automatically.

6. Security

OAuth tokens are encrypted at rest. Session cookies are HttpOnly, Secure, and SameSite=Lax. We never log OAuth tokens in our logs.

Reporting a vulnerability: if you believe you've found a security issue in FanTranslator, email support@stellorns.xyz with [SECURITY] in the subject line. Please include enough detail to reproduce the issue and give us a reasonable time to respond before any public disclosure.

7. Cookies & Local Storage

We use a session cookie to keep you signed in, and a locale cookie to remember your dashboard language. Theme and sound preferences are stored in your browser's local storage and never sent to our servers. We do not use advertising or tracking cookies.

8. Contact

For privacy requests or questions, contact support@stellorns.xyz or use the in-app deletion feature in Settings.