Privacy Policy for MacroCrafter

Effective Date: October 10, 2026

1. Introduction
Welcome to MacroCrafter, accessible at https://macrocrafter.io. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

Personal Information:
- Email address (when you create an account)
- Payment information (processed securely by Stripe)
- Account preferences and settings

Non-Personal Information:
- Browser type and version
- Device information
- Usage data and analytics
- Cookies and similar tracking technologies

Device Fingerprinting:
We use device fingerprinting technology (FingerprintJS) to prevent abuse of our free tier and protect against fraudulent activity. This technology creates a unique identifier based on your browser and device characteristics. This data is used for two purposes only: to limit how many free macros a single device can create, and to restore the chats and macros of a returning guest on the same device. It is not shared with third parties for advertising.

3. How We Use Your Information

We use the collected data to:
- Process and fulfill your macro generation requests
- Process payments and manage subscriptions
- Prevent abuse and fraudulent activity
- Improve and optimize our service
- Send service-related communications
- Provide customer support

4. AI and Third-Party Processing
MacroCrafter uses artificial intelligence (AI) services to generate macros. Your prompts and game-related information may be processed by our AI provider, Anthropic, through Vercel AI Gateway, to generate responses. We don't send your email address or account details to the AI provider. It receives what you type in the chat and any images you attach, so please don't include personal information in your prompts.

5. Payment Processing
Payments are processed by Stripe, Inc. Your payment card details are collected and processed directly by Stripe and are not stored on our servers. Please review Stripe's Privacy Policy at https://stripe.com/privacy.

6. Data Sharing
We do not sell your personal data. We may share information with:
- The service providers listed in section 7, to run MacroCrafter
- Law enforcement when required by law

7. Service Providers
We use the following service providers to run MacroCrafter. Each one receives only what it needs for the job it does for us:
- Supabase: our database and sign-in. Accounts, macros and chat history are stored here.
- Vercel: hosts the website and runs our server code. It also stores images you attach to a chat and routes AI requests through Vercel AI Gateway.
- Anthropic: the AI model provider. Its Claude models write your macros, reached through Vercel AI Gateway. See section 4.
- Stripe: payments and subscriptions. See section 5.
- Resend: delivers the emails we send you, including sign-in links. It receives the recipient's email address and the message.
- Crisp: our support chat. If you open it, Crisp receives the messages you send. If you are signed in, it also receives your account ID.
- Cloudflare Turnstile: a bot check. Where a security check is shown, such as on the sign-in page, Cloudflare receives the details it needs to judge the request.
- Plausible: website analytics, which counts page views. It runs on the production site only.
- A managed Redis provider: holds short-lived counters that limit how many guest sessions one network can start. These are keyed by your IP address for up to an hour. It also holds the in-progress data needed to resume an interrupted chat response.
- Google and Discord: sign-in providers, if you choose to sign in with them. They confirm who you are and share your email address and basic profile details (such as your name and profile picture) with us.

8. Test and Development Environments
Our test and development environments are kept apart from production:
- The development environment has its own separate database, which holds test data only.
- Preview deployments have no access to the production database. Any temporary preview database holds test data only.
- Production data is not copied into test environments.
- Email sent from test environments goes only to the team's own inboxes.

9. Data Retention
- Account data: Retained while your account is active
- Guest user data: May be deleted after 90 days of inactivity
- Payment records: Retained as required by law
- Device fingerprints and device macro counts: Removed after about 90 days

10. Your Rights (GDPR/CCPA)
Depending on your location, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your data
- Object to processing
- Data portability
- Withdraw consent

To exercise these rights, contact us at support@macrocrafter.io.

11. Cookies and Tracking
We use cookies for:
- Authentication and session management
- Remembering your preferences

Our analytics (Plausible) does not use cookies. Device fingerprinting, described above, is not a cookie; it is used only for the purposes described there.

You can control cookies through your browser settings. Disabling cookies may affect service functionality.

12. Children's Privacy
MacroCrafter is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.

13. International Data Transfers
Your data may be transferred to and processed in the United States. By using our service, you consent to this transfer.

14. Security
We implement appropriate technical and organizational measures to protect your data, including encryption and secure authentication.

15. Updates to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or a notice on our website.

16. Contact Us
For questions about this Privacy Policy, contact us at:
Email: support@macrocrafter.io

By using MacroCrafter, you acknowledge that you have read and understood this Privacy Policy.