Malwarebytes questions who gets photos uploaded to AI Halloween sites

Malwarebytes has examined Halloween-themed AI video sites that let users upload personal photos to generate videos, such as vampire or zombie-themed clips. The investigation found no malware or phishing on the sites themselves, but raised questions about who operates them and who is responsible for the uploaded photos. Many of the sites appear polished and reassuring, with privacy promises, FAQs, refunds, and even parental-consent checkboxes, yet most offered little to identify the operator. Instead, contact details were typically only a support email linked to the site’s own domain.

The report notes that photos are often processed by external AI providers, meaning users must trust both the site collecting the images and the third-party processors. Sign-in commonly occurs through Google, but that does not verify the service’s privacy promises or identify the operator. Some sites show only a Gmail contact or a connection to a company such as Neon in the sign-in window, which does not establish who runs the service.

Pricing can be opaque and promotional, with credits and subscriptions that may expire or renew automatically. The article advises cautious uploading: verify who runs the service, where photos go and how deletion works, and review payment terms and Google connections after use. It also emphasises parental care for children’s images and the importance of retaining a clear deletion pathway, should outside providers hold copies.