← Back

Privacy Policy

What we collect

• Account info: email address, via our authentication provider (Clerk). Clerk sets its own session cookie to keep you signed in; this cookie is strictly necessary for the service to work, so it doesn't require a cookie-consent banner. We don't run analytics or advertising trackers, and we don't set any other cookies ourselves.
• Generated content: the grid/palette data and metadata of assets you create, stored so your gallery syncs across devices.
• Prompts & reference images: the text prompts and any reference images you submit for a generation are sent to the third-party AI model provider that fulfills that specific request (see "Third parties" below), and retained by us only as long as needed to bill and debug that generation — we don't otherwise store or reuse prompt content.
• Usage logs: which model was used per generation and its cost, for billing and abuse prevention — not the content of your prompts beyond what's needed to bill and debug a failed generation.
• Payment info: handled entirely by Polar, our merchant of record; we never see or store your card details.

How we use it

To run the service: authenticate you, sync your gallery, meter and bill generations, prevent abuse (rate limits and per-account caps), and fix bugs. We don't sell your data or generated content to third parties.

Third parties

We rely on a small set of processors (sub-processors) to run the service:

• Clerk — authentication and account/session management.
• Neon — our Postgres database host; stores your account, assets, and usage-log rows.
• Polar — payments, acting as merchant of record; handles checkout, card data, VAT/sales tax collection and remittance. We never see your full card details.
• AI model providers (via OpenRouter and TeamoRouter, which route requests to providers such as the GPT and Fable model families and image-diffusion models) — receive your prompt and any reference image for the sole purpose of generating your requested asset.

Each processor only receives the data needed to perform its function. If we add a new sub-processor that materially changes this list, we'll update this page.

Retention & deletion

Your data is retained while your account is active. You can request account deletion at any time by emailing us below; this exports a downloadable copy of your gallery and usage history, then permanently deletes your account, assets, and usage-log rows from our database and your account from Clerk. We aim to complete deletion requests without undue delay, and in any case within the timeframes required by applicable law (for EU users, within one month under GDPR, extendable by up to two months for complex requests). We may also delete, limit, or refuse to store content ourselves — e.g. for accounts over their storage quota, inactive for an extended period, or reasonably suspected of abusing the service — as described in our Terms of Service; where practical we'll try to give you a chance to export first.

Your rights

If you're in the EU/EEA or UK, you have rights under GDPR to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Contact us below to exercise any of these rights.

Contact

Questions or data requests: support@spriteforge.tech