Privacy Policy

Who we are

Prompt Creatures is an independent project operated by an individual. For privacy inquiries: info@promptcreatures.fun.

What we collect

Depending on how you use the service, we may process:

• Account & authentication data — including your email address and credentials managed through Supabase Auth (our authentication provider).
• Gameplay & profile data — information you provide or that is generated when you play (for example creature state, map presence, battles), stored in our database.
• Technical & log data — including IP addresses and similar identifiers that may appear in server or security logs, and diagnostic information needed to operate and secure the service.
• Payment-related identifiers — we do not store full payment card numbers on our servers. Payments are processed by our payment provider; we may receive limited identifiers (such as customer or subscription IDs), transaction metadata, and payment status from that provider as needed to fulfill purchases (for example sponsored labels).
• Cookies & similar technologies — we and our analytics providers may use cookies or local storage for session maintenance, preferences, security, and usage analytics. Your optional cookie choices are stored in your browser (for example in localStorage) so we can respect them on future visits; you can change them anytime via “Cookie settings” on the site.
• Marketing & communications — if you join our email list or opt in to updates, we process your email address and related preferences to send messages you have signed up for. You can unsubscribe using the link in those emails or by contacting us.

Why we use your information

We use personal information to:

• Provide, operate, and improve Prompt Creatures (accounts, gameplay, map, battles).
• Authenticate you and secure the service.
• Process payments and deliver paid features you purchase.
• Analyze usage (for example via analytics tools) to understand performance and improve the product.
• Send transactional messages (for example security notices, receipts where applicable).
• Send optional marketing emails when you have opted in.
• Comply with law, respond to lawful requests, and enforce our Terms.

Legal bases (EEA/UK visitors)

Where GDPR or UK GDPR applies, we rely on appropriate legal bases, such as: performance of a contract (providing the service you signed up for); legitimate interests (security, analytics, product improvement), balanced against your rights; consent where required (for example certain cookies/marketing); and compliance with legal obligations.

Sharing with third parties

We share personal information with service providers who help us run Prompt Creatures, including:

• Supabase — authentication and database hosting.
• Payment processors — to collect and process payments.
• Hosting, analytics, and email providers — as applicable to operate the site, measure usage, and send emails.

These providers process data under instructions and contractual safeguards appropriate to their role. We do not sell your personal information as commonly understood under US state privacy laws.

International transfers

Our infrastructure and subprocessors may be located outside your country. Where required, we rely on appropriate transfer mechanisms (such as standard contractual clauses) or adequacy decisions.

Retention

We keep personal information only as long as needed for the purposes above — for example while your account is active, to meet legal or accounting requirements, or to resolve disputes. Log retention periods may be shorter or rotated periodically.

Your choices & rights

Depending on where you live, you may have rights to access, correct, delete, or export personal information; to object to or restrict certain processing; to withdraw consent where processing is consent-based; and to lodge a complaint with a supervisory authority. To exercise rights, email info@promptcreatures.fun. We may need to verify your request.

Children

Prompt Creatures is not directed at children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children below that age. If you believe we have, contact us and we will take appropriate steps.

Security

We implement reasonable technical and organizational measures to protect personal information. No online service is perfectly secure.

Changes

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. Continued use of the service after changes constitutes acceptance of the updated policy where permitted by law.

Related

See also our Terms of Service.