Effective 8 October 2026 · Last updated 8 October 2026

Privacy Policy

Your app has a story. This policy explains what information Mascotale uses to help you bring it to life.

1. Who this policy covers

Mascotale (also referred to as “we”, “us”, or “our”) provides an AI-assisted mascot and animation studio at mascotale.com and its hosted website. This policy covers visitors, account holders, and people who contact us. For privacy questions or requests, contact hello@mascotale.com.

2. Information we collect

• Account information: when you sign in with Google through Supabase, we receive your Google account identifier, email address, and basic profile information, such as your name and profile image when provided. We also process session credentials to keep you signed in. We never receive your Google password.
• App and creative content: app links, public store listing information, icons and screenshots, briefs, prompts, reference images you provide, selected characters, pose and motion instructions, and generated images and videos.
• Workspace and usage records: your saved apps, selections, pack allowances, generation attempts, task identifiers, timestamps, errors, and usage counters used to enforce limits and investigate failures.
• Technical information: our hosting and authentication services may process IP addresses, browser and device information, request logs, and security events when you access the service.
• Communications: information you include when you email us or request support.

The current test checkout does not collect card details or charge a payment. If paid checkout is introduced, we will update the relevant disclosures before collecting payment information.

3. Why we use this information

We use information to authenticate you, keep workspaces associated with their owners, analyze your app, generate and deliver assets, save your progress, administer packs, respond to support requests, troubleshoot the service, prevent abuse, and meet applicable legal obligations. Where a legal basis is required, these activities rely on performing our agreement with you, legitimate interests in operating and securing the service, legal obligations, or consent where required. You may withdraw consent where processing relies on it.

4. Google account data

Google sign-in is used for account creation, authentication, and identifying your workspace. The current login flow does not request access to your Gmail, Google Drive, contacts, or calendar. We do not sell Google account data or use it for advertising or to train AI models. Your Google sign-in profile is not included in mascot-generation prompts by our login integration.

You can revoke Mascotale’s Google access through your Google Account connections. Revoking access does not by itself delete information already stored in Mascotale; contact us to request deletion.

5. AI processing and service providers

To perform a generation, we send the relevant app information, creative instructions, reference images, and previously generated assets to the AI providers used for that task. The current service integrates OpenAI, Black Forest Labs, and Runway; the provider used can vary by feature and configuration. Do not submit passwords, API keys, sensitive personal information, or confidential material you are not authorized to share with these providers.

Google and Supabase support sign-in and account management. OpenAI’s Sites hosting and Cloudflare infrastructure support website delivery, database storage, file storage, and operational logging. Providers process information under their applicable terms, privacy policies, and our service arrangements; their retention and processing practices can differ. Mascotale does not operate its own model-training pipeline using your projects.

We may also disclose information when required by law, to address fraud or security incidents, or to protect legal rights. We do not sell personal information or share it for cross-context behavioral advertising.

6. Cookies, browser processing, and shared links

We use authentication cookies and related browser mechanisms needed for sign-in and sessions. Blocking or clearing them can sign you out or prevent workspace features from working. Some export and background-removal tools process assets in your browser and may download processing libraries or models from third-party infrastructure, which receives ordinary network request information.

Account workspaces require sign-in. A preview explicitly made available through a shareable link can be viewed by someone who has that link. Treat shared preview URLs and downloaded files accordingly; this policy does not make a publicly accessible preview confidential.

7. Storage, retention, and security

Workspace records and assets are stored so you can return to your work. Retention depends on whether your account and projects remain in use, support needs, security investigations, and legal requirements; the current service does not promise an automatic deletion date. Operational records and provider copies may follow separate retention periods.

We use HTTPS, authenticated workspace access, ownership checks, and server-side controls to help protect information. No internet service can guarantee absolute security. Providers may process information outside your country, where privacy laws may differ. Where applicable, international processing is subject to legally required safeguards.

8. Your choices and privacy requests

Email hello@mascotale.com from your account email to request access, correction, a copy of your data, or deletion of your account and projects. Include the relevant app or project identifiers, but never send a password or secret key. We may verify your identity before acting.

Depending on your location, you may also have rights to restrict or object to processing, withdraw consent, or complain to your local privacy regulator. We handle requests under applicable law. Some information may need to be retained for legal or security reasons, and deletion from backups or third-party systems may not be immediate. We will explain applicable limitations when responding. Deleting an account may make saved projects and assets unavailable; download anything you need first.

9. Children

Mascotale is intended for adult app developers, not children. You must be at least 18 to create an account. If you believe a child has provided personal information, contact us so we can investigate and address it.

10. Changes and contact

We will update the date on this page when this policy changes and provide additional notice where required for material changes. Questions or concerns can be sent to hello@mascotale.com. See also our Terms of Service.