1. Introduction
Game Prompts LLC ("we", "us", or "our") operates Game Prompt AI ("the Platform"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Platform.
2. Information We Collect
2.1 Account Information
- Email address (provided during registration or via Google sign-in)
- Display name
- Account creation and last login timestamps
- Authentication method (Google or email/password)
2.2 Payment Information
- Payment processing is handled entirely by Stripe. We do not store your credit card numbers, bank account details, or other payment credentials on our servers.
- We store your Stripe customer ID to link your account to your payment history.
- We maintain a transaction ledger recording credit purchases, subscription payments, and credit usage for billing and support purposes.
2.3 Usage Data
- Projects you create (game data, chat history, project settings)
- Generated assets (3D models, images, audio, music, spritesheets)
- AI chat messages and prompts you submit
- Credit balance and usage history
- Storage usage metrics
2.4 Analytics Data
We use Google Analytics (via Firebase) and Mixpanel to collect usage data, including:
- Pages visited and features used
- AI generation types and success/failure rates
- Authentication method used
- Browser type and device information
- An abbreviated excerpt of the prompts and chat messages you enter to generate or update games and assets (up to the first 200 characters). We collect this solely to monitor and improve the quality of the service - for example, to understand what users are trying to create and to fix and improve our AI generation. We do not use it for advertising, and we do not sell it.
2.5 Shared Games
If you create a share link for a game, we store:
- A published copy of that game build, served to anyone who opens the link
- The title and any message you attach to it - these are shown publicly on the share page, so do not put anything private in them
- Which of your projects and which version the link points to, and when it was last updated
- Counts of how many times the link was opened, how many distinct browsers opened it, and how many visitors stayed long enough to play
Our staff can see the list of shared games, including their titles, messages and the owning account, in order to respond to reports and takedown notices. See Section 6 for the cookie used to count distinct visitors.
2.6 If Someone Sends You a Shared Game
You do not need an account to play a game someone shared with you, and we do not ask you to create one. When you open a share link we record that the link was opened, and we set a cookie so that opening the same link again is not counted as a new visitor (see Section 6). We do not receive your name or email address, we do not know who sent you the link, and the person who shared the game sees only counts - never who you are.
3. How We Use Your Information
- Provide the service: Process your requests, generate game content, manage your projects and credits.
- Process payments: Manage credit purchases and subscriptions through Stripe.
- Improve the Platform: Analyze usage patterns to improve features, fix bugs, and optimize performance.
- Communicate with you: Send service-related emails (account verification, password resets, billing receipts).
- Ensure security: Detect and prevent fraud, abuse, and unauthorized access.
We do not sell your personal information to third parties. We do not use your project content or AI prompts for advertising purposes.
4. Third-Party Services
To provide our service, we share certain data with the following third-party providers. Each provider processes data according to their own privacy policies:
| Service | Purpose | Data Shared |
|---|
| Google Firebase | Authentication, database, analytics, hosting | Email, display name, usage data, analytics events |
| Mixpanel | Product analytics | Usage events, abbreviated prompt/chat excerpts (up to 200 characters), user identifier |
| Stripe | Payment processing | Email, payment method details, transaction amounts |
| Cloudflare R2 | File storage (projects, assets, builds) | Generated game files and assets |
| OpenAI | AI game design and code generation | Chat prompts, game data, system instructions |
| Anthropic | AI game design, code generation, content analysis | Chat prompts, game data, images for analysis |
| Meshy | 3D model generation, rigging, animation | Text prompts, art style preferences |
| Tripo | 3D model generation, animation | Text prompts |
| AutoSprite | 2D character animation (sprite sheets) | Character image, character name/description, animation prompts |
| Stability AI | Image and 3D generation | Text prompts |
| ElevenLabs | Voice synthesis, sound effects, music | Text prompts, audio parameters |
| Google Gemini | Image generation | Text prompts |
| Upstash | System prompt storage | No user data is sent to Upstash |
AI model training: Some AI providers may use the data sent to them - including your text prompts and generated assets - to train and improve their own models. In particular, Meshy may use 3D models and related inputs generated through the Platform to train and improve its AI. This does not change your right to use and commercialize the games and assets you create (see our Terms of Service), but it means your generations and the prompts and images used to create them may be retained and learned from by these providers under their own terms. If you do not want specific content used this way, please do not generate it on the Platform.
5. Data Storage and Security
- Account data is stored in Google Firestore (Firebase), secured with per-user access rules.
- Generated assets and project files are stored in Cloudflare R2. Source files are private; compiled game builds are accessible only via versioned URLs specific to your project.
- Authentication is handled by Firebase Authentication. Passwords are hashed and never stored in plaintext. Google sign-in uses OAuth 2.0.
- API keys and secrets are stored as encrypted environment variables and are never exposed to the client.
- Payment data is processed and stored by Stripe. We never have access to your full card details.
- All data transmission is encrypted via HTTPS/TLS.
6. Cookies and Tracking
The Platform uses the following cookies and similar technologies:
- Essential cookies: Firebase Authentication session cookies required for login functionality. These cannot be disabled.
- Game access cookie (
gp_pass): a short-lived, httpOnly cookie set when you press Play, which authorizes your browser to load your own compiled game files. It expires after about two hours and is required to play your games. - Shared game visitor cookie (
gp_sv): set when you open a share link, so that re-opening the same link is not counted as another visitor. It is first-party and httpOnly, stores only the identifiers of share links opened on this browser, and is used purely to keep the view count on those games honest. It is not used to build a profile of you, is not shared with anyone, and is not read on any other site. It is not set unless you accept cookies; without it we simply do not count you as a distinct visitor, and nothing else changes about playing the game. - Analytics cookies and local storage: Google Analytics (Firebase) and Mixpanel use cookies and browser local storage to understand usage patterns and improve the Platform. These only run if you accept cookies. If you decline, or have not yet answered the banner, they are not loaded at all and no analytics events are sent.
We do not use third-party advertising cookies or tracking pixels.
7. Data Retention
- Active accounts: Your data is retained as long as your account is active.
- Deleted accounts: When you delete your account, all associated data is permanently removed from our systems, including projects, assets, and stored files in both Firestore and Cloudflare R2. Please note that data already processed by the third-party AI providers listed above (for example, content used to train or improve their models) is governed by those providers' own terms and retention policies, and deleting your account on our Platform does not by itself remove such data from their systems.
- Inactive accounts: Accounts on the free plan that have been inactive for more than 12 months may be scheduled for deletion. You will receive an email notification before any deletion occurs.
- Transaction records: Payment and credit transaction records may be retained for accounting and legal compliance purposes even after account deletion.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
All Users
- Access: You can view your account data on the Profile page at any time.
- Deletion: You can delete your account and all associated data from the Profile page.
- Correction: You can update your display name and account details from the Profile page.
European Union (GDPR)
If you are located in the EU/EEA, you additionally have the right to:
- Request a copy of all personal data we hold about you (data portability).
- Object to processing of your personal data.
- Withdraw consent for analytics cookies at any time.
- Lodge a complaint with your local data protection authority.
California (CCPA)
If you are a California resident, you additionally have the right to:
- Know what personal information is collected and how it is used.
- Request deletion of your personal information.
- Opt-out of the sale of personal information (we do not sell personal information).
- Non-discrimination for exercising your privacy rights.
To exercise any of these rights, contact us at support@gameprompt.ai.
9. Children's Privacy
The Platform is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at support@gameprompt.ai and we will promptly delete the information.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a new "Last updated" date. Your continued use of the Platform after changes are posted constitutes acceptance of the updated policy.