Privacy Policy

Last updated: July 16, 2026

The short version: your pasted content never touches our servers on the free tier, is never stored on any tier, and we don't run tracking ads or sell data. The details:

1. Content you convert

Browser (free) renders: your code is processed entirely inside your browser. It is never transmitted to us. We could not read it if we wanted to.

Pro cloud renders: your code is transmitted over TLS to our rendering pipeline (Cloudflare's browser rendering service), converted to an image, returned to you, and discarded. It is not written to any database or storage. We store only metadata: that a render happened, its preset/size, and whether it succeeded.

2. Account data we hold

Email address, sign-in identity (Google OAuth ID or magic-link email), account creation date — stored with Supabase (our database/auth provider). Passwords: none exist; we use passwordless sign-in.

3. Payment data

Handled entirely by Dodo Payments, our Merchant of Record. We never receive or store card numbers. We receive from Dodo: your plan, its status, and a customer reference — enough to unlock your features, nothing more. Dodo's own privacy policy governs the checkout.

4. Usage analytics

We use Cloudflare's aggregate, cookie-less analytics (page counts, country-level traffic). No advertising trackers, no fingerprinting, no third-party analytics scripts, no sale or sharing of personal data for advertising — ever.

5. Cookies & local storage

One purpose only: keeping you signed in (Supabase session token in your browser's local storage). No marketing cookies, hence no cookie banner.

6. Where data lives & who processes it

Supabase (database/auth), Cloudflare (hosting, rendering, analytics), Dodo Payments (billing). Each processes data under their own security and compliance programs. Data may be processed in the US/EU data centers of these providers.

7. Retention & deletion

Account data is kept while your account exists. Delete your account (in-app or by emailing support@artifactshot.app) and your profile, subscription records and usage metadata are erased within 30 days, except minimal billing records Dodo must retain for tax law.

8. Your rights

Wherever you live, we honor the core set: access, correction, export, and deletion of your personal data. One email: support@artifactshot.app. We respond within 30 days, usually much faster.

9. Children

The Service is not directed at children under 16 and we don't knowingly collect their data.

10. Security

TLS everywhere; row-level security on our database; secrets isolated from client code; the rendering sandbox is designed so pasted code can access nothing of yours. No system is perfect — if a breach affecting you ever occurs, we will notify you promptly.

11. Changes

Material changes announced by email or in-app 14 days ahead. Contact: support@artifactshot.app