Privacy Policy

How Humanize Gen handles your data — in plain English.

Effective Date: July 10, 2026 • Last Updated: July 12, 2026

1. Who We Are

Humanize Gen (https://humanizegen.com) is a free AI humanizer — you paste AI-generated text and our service rewrites it to sound human. The site is built and operated by the 345tool Team, an independent developer collective.

Our privacy approach is simple: we don't want your data. We collect only what's strictly necessary for the tool to function, and we never monetize personal information.

2. Data Controller

3. How We Process Your Text

When you click Humanize, your submitted text is sent to the DeepSeek API (api.deepseek.com) for AI rewriting. The rewritten result is returned to your browser immediately.

  • Your text is never written to disk or database — it exists only in transit.
  • Our server does not log request bodies — Nginx access logs record only IP, URL, timestamp, and status code.
  • Processing is entirely stateless. Once the response is sent, no trace of your text remains on our server.

4. Google Sign-In & Account Data

Signing in is optional — the tool works without an account for texts up to 1,200 words. If you choose to sign in via Google OAuth 2.0, we receive and store:

  • Your name (as shown on your Google profile)
  • Your email address (as shown on your Google profile)
  • Your Google ID (a unique identifier used to link your account)
  • Credit balance and daily check-in status (generated by our system)

This data is stored in a MySQL database on our server and used exclusively to identify your account and manage your credit balance. We never see your Google password — authentication is handled entirely by Google.

5. Cookies

If you sign in, we set a single session_token cookie to maintain your login state:

  • HttpOnly — inaccessible to JavaScript, preventing XSS theft.
  • Secure — transmitted only over HTTPS.
  • SameSite=Lax — protects against cross-site request forgery.
  • 30-day expiry — you stay signed in for 30 days unless you sign out.

We set no advertising, tracking, or third-party cookies. The session_token is strictly functional — no cross-site tracking occurs.

6. Browser Storage (localStorage)

Two items are stored in your browser's localStorage:

  • Theme preference — your light/dark mode choice, so it persists across visits.
  • Humanization history — your recent input/output pairs (up to 50 entries), so you can revisit past results. This data never leaves your device — we cannot see or access it.

You can clear your history at any time via the History panel on the homepage. No tracking identifiers are created.

7. Google Analytics (GA4)

We run a minimal GA4 tag (G-6TY6EXYSJR) for aggregated traffic metrics: page view counts, approximate geography from anonymized IP, browser and device categories, and traffic source types.

GA4 never receives: your submitted text, API request content, account information, or any user-generated data. You can opt out via browser privacy settings, ad blockers, or Google's Analytics Opt-out Browser Add-on.

8. Third-Party Services

Humanize Gen depends on these external services to function:

  • DeepSeek API (api.deepseek.com) — your submitted text is sent here for AI processing. Refer to DeepSeek's documentation for their data handling practices.
  • Google Identity Services (accounts.google.com) — handles OAuth 2.0 sign-in. Your credentials are exchanged directly with Google; we never handle your password.
  • Google Fonts (fonts.googleapis.com) — serves DM Sans, Space Grotesk, Sora fonts and Material Symbols icons.
  • Google Analytics (googletagmanager.com) — GA4 library for aggregated metrics (see Section 7).
  • cdnjs (cdnjs.cloudflare.com) — hosts the diff-match-patch library used for text comparison highlighting.

We do not embed advertising networks, social media widgets (share buttons use plain URLs with no tracking), comment systems, or any service that shares your content beyond the processing pipeline.

9. Server Access Logs

Our Nginx web server maintains standard access logs for operational stability and security. Logged fields: IP address, browser User-Agent, requested URL, HTTP status code, response size, and timestamp. Request bodies are NOT logged. Logs rotate automatically and are retained for up to 90 days.

10. API Rate Limiting

API endpoints use lightweight, IP-based rate limiting to prevent abuse (20 requests per minute for the humanize endpoint, 5 per minute for check-in). Temporary counters are stored as files on the server and automatically expire when the rate window resets. No persistent record is kept beyond that window.

11. Data Retention & Account Deletion

Submitted text: Not retained — processed in transit only.

Account data: Retained as long as your account exists. Session tokens are cleaned up automatically after expiry (30 days). Inactive sessions are periodically purged.

Account deletion: To delete your account and all associated data (name, email, Google ID, credits), contact [email protected]. We will process your request within 30 days.

12. Your Rights

GDPR (EU/EEA): If you have signed in, we hold your name, email, and Google ID. You may request access, rectification, or deletion of this data at any time by contacting [email protected]. If you have not signed in, we hold no personal data.

CCPA (California): We do not sell, rent, or share personal information. No behavioral advertising or cross-context behavioral tracking takes place on this site.

COPPA (Under 13): We do not knowingly collect data from children under 13. Google Sign-In requires a Google account, which has its own age requirements.

13. Changes to This Policy

This policy may be updated to reflect changes in the service or legal requirements. The latest version is always available at https://humanizegen.com/privacy. Significant changes will be noted in the Release Log on our About page. Continued use after updates constitutes acceptance.

14. Contact