The short version: we store your sign-in email and your purchases, nothing else. Last updated July 2026.
Account. Signing in with Google gives us your email address and profile picture. That is the whole account record. We use the email to sign you in and to send purchase receipts.
Purchases. Payments are processed by Stripe. Your card details go to Stripe directly and never touch our servers; we store only which assets or kits your account owns.
Server logs. Like every web server we keep short-lived access logs (IP address, requested URL, browser user agent) for abuse prevention and debugging.
No third-party analytics, no ad trackers, no fingerprinting, no marketing emails, no selling or sharing of your data with anyone. The only cookie we set is the session cookie that keeps you signed in.
We send transactional email only: sign-in links and purchase receipts.
Want your account and its data deleted? Email [email protected] from the address you signed in with and it is gone.