Account info: email address, via our authentication provider (Clerk).
Clerk sets its own session cookie to keep you signed in; this cookie is strictly necessary
for the service to work, so it doesn't require a cookie-consent banner. For site analytics we use
our own system (see Site analytics below) and, for now, Plausible's cookieless
analytics; neither sets cookies or builds a cross-site or advertising profile. We run no
advertising trackers and set no other cookies ourselves.
Where you came from: on your first visit, our own script keeps a small note
in your browser's local storage (not a cookie): the campaign tags of the link you arrived through
(the utm_source, utm_medium, utm_campaign and
utm_content parameters, if it had them), the name of the website that sent you (its
host name only, such as reddit.com), the page you landed on (without its query) and
the time. It is written once and never updated. It leaves your browser only if you sign in: the
first time we see your account signed in, we save it on your account, once, and only if the
visit came before the account was created. We use it to learn which of our posts and links bring
people who sign up, try a generation and buy credits, counted per source — never to track
you on other sites, and it is shared with no one. If your browser sends a Global Privacy Control
signal, the note isn't written. You can delete it by clearing this site's data in your browser;
it is included in your account export and deleted with your account.
Short-link counts: links of the form spriteforge.tech/go/…
redirect to a page and add the campaign tags above. We count how many times each link is opened
per day; nothing about who opened it (no IP address, device or account) is stored with the count.
The click is also recorded as the start of that day's visit in our site analytics (below).
Site analytics: our own script, which sets no cookies and stores nothing in
your browser, tells our server which pages you open, the website and campaign tags that brought
you, how long each page was in view, and the steps the site counts (such as opening the top-up
window). Our server also records the generations you start, finish or that fail, the time one
waits in the queue, requests refused (for example for lack of credits) and checkouts you start.
To tell one visit from another without storing anything on your device, the server combines your
IP address and your browser's identification string with a random key that is replaced every day
and then deleted, into a code that can't be turned back into either and can't be recognised on
another day. Neither the IP address nor the identification string is stored: we keep only your
country and the type of device, operating system and browser (including whether you're in an
app's built-in browser, such as Instagram's). If you're signed in, that day's visit, including
what you did before signing in that day, and your later visits are linked to your account, so we
can see how people use SpriteForge and where it goes wrong for them. If you're in an app's
built-in browser and use our link to carry on in your usual browser, the link holds a one-time
code so the two visits count as one; the page removes it from the address bar when it opens.
We keep these records for 13
months; the ones linked to your account are included in your account export and deleted with your
account. If your browser sends a Global Privacy Control signal, nothing is sent, and if you're
signed in, the records linked to your account are deleted and no more are kept. You can also ask
us by email (below) to delete them and stop.
Generated content: the grid/palette data and metadata of assets you create,
stored so your gallery syncs across devices.
Edit links: when you open a sprite in the editor through an edit link —
yourself, or through an AI assistant such as Claude acting on your request — that sprite's
pixel and palette data is stored under an unguessable link so the editor can load and save it
without an account. Anyone holding the link can view and edit that sprite. Edit links aren't
tied to an account. A link stops working 24 hours after the last edit, and never lasts more than
7 days after it's created; its sprite is then deleted automatically, within a day.
AI assistant connectors: if you connect your SpriteForge account to an AI
assistant (such as Claude) through our sign-in, that assistant can read and change your
projects and sprites, see your credit balance, and start AI generations that spend your
credits, when you ask it to. Download links it creates for your sprites work without sign-in
and expire after 24 hours; anyone holding one can download that sprite until then. It can't
delete your sprites or projects, make purchases or change your account. You can disconnect it
at any time in the assistant's settings.
Prompts & reference images: the text prompts and any reference images
you submit for a generation are sent to the third-party AI model provider that fulfills that
specific request (see "Third parties" below), and retained by us only as long as needed to
bill and debug that generation — we don't otherwise store or reuse prompt content.
Usage logs: which model was used per generation and its cost, for billing
and abuse prevention — not the content of your prompts beyond what's needed to bill and
debug a failed generation.
Payment info: handled entirely by Polar, our merchant of record; we never
see or store your card details.
How we use it
To run the service: authenticate you, sync your gallery, meter and bill generations, prevent
abuse (rate limits and per-account caps), and fix bugs. We don't sell your data or generated
content to third parties.
Third parties
We rely on a small set of processors (sub-processors) to run the service:
Clerk — authentication and account/session management.
Vercel — our hosting and serverless-compute platform; serves the site
and runs the API, processing your requests, IP address, and operational logs.
Neon — our Postgres database host; stores your account, assets, and
usage-log rows.
Polar — payments, acting as merchant of record; handles checkout,
card data, VAT/sales tax collection and remittance. We never see your full card details.
Plausible Analytics — privacy-friendly, cookieless website analytics;
receives aggregate page-view and event data only (no cookies, no cross-site tracking, no
advertising profile).
AI model providers — your prompt and any reference image are sent to
OpenRouter, the routing service that fulfils generation requests, and on to the
underlying AI model providers it routes to (which currently include OpenAI and Anthropic), for the
sole purpose of generating your requested asset. Some of these providers process data in the
United States.
Each processor only receives the data needed to perform its function. If we add a new
sub-processor that materially changes this list, we'll update this page.
Retention & deletion
Your data is retained while your account is active. You can delete your account at any time
yourself from the account panel in the app (the Delete account button), or by
emailing us below; either way this first exports a downloadable copy of your gallery and usage
history, then permanently deletes your account, assets, and usage-log rows from our database and
your account from Clerk. We aim to complete deletion requests without undue delay, and in any case
within the timeframes required by applicable law (for EU users, within one month under GDPR,
extendable by up to two months for complex requests). We may also delete, limit, or refuse to
store content ourselves — e.g. for accounts over their storage quota, inactive for an
extended period, or reasonably suspected of abusing the service — as described in our
Terms of Service; where practical we'll try to give you a chance to export first. Site analytics
records are deleted after 13 months, or with your account if they're linked to it.
Legal basis (EU/EEA/UK)
Where GDPR applies, we process your personal data on these bases: performance of a
contract (creating and running your account, syncing your gallery, and metering and
billing generations); legitimate interests (preventing abuse and fraud, keeping
the service secure, site analytics to understand how the site and the service are used and fix
where they fail, and knowing which of our posts and links bring sign-ups and purchases), balanced
against your rights and freedoms;
and legal obligation (tax and accounting records, handled by Polar as merchant
of record). We don't use your data for advertising or automated profiling.
International transfers
Some of our processors — notably certain AI model providers (see Third parties) —
process data in the United States. Where personal data is transferred outside the EEA/UK, that
transfer is covered by the relevant provider's safeguards (such as the EU Standard Contractual
Clauses). We only send what's needed to fulfil your request.
Children
SpriteForge is not directed to children. You must be at least 16 (or the age of digital consent
in your country, if higher) to create an account and use the service.
Your rights
If you're in the EU/EEA or UK, you have rights under GDPR to access, correct, export, or
delete your personal data, and to object to or restrict certain processing. Deleting your
account from the app also returns a downloadable export of your data; to access, correct, or
export your data without deleting your account, email us below and we'll fulfil the
request. Contact us below to exercise any of these rights. You also have the right to lodge a
complaint with your local data-protection authority; in Slovakia this is the Úrad na ochranu
osobných údajov Slovenskej republiky (dataprotection.gov.sk).
Data controller & contact
The data controller for personal data processed by SpriteForge is
Ondrej Knizat, Dunajska 1, 949 11 Nitra, Slovakia
(operating as an individual). Questions or data requests:
support@spriteforge.tech.