Privacy Policy

1. Who we are

Subcreation is operated as a personal project. For questions about this policy, contact hello@subcreation.app.

2. What data we collect

• Account data: your name and email address when you register.
• Content data: worlds, entities, maps, and any other content you create inside the app.
• Usage data: basic server logs (IP address, timestamp, route) used for security and debugging.
• Payment data: handled entirely by our payment processor. We do not store card numbers.

3. How we use your data

• To provide, maintain, and improve the service.
• To send transactional emails (account verification, password reset).
• To process payments for paid plans.
• To comply with legal obligations.

We do not run ads. We do not sell your data. We do not use your content to train AI models.

4. Data storage and security

Data is stored on servers within the EU/UK. We use industry-standard encryption in transit (TLS) and at rest. Access to production data is strictly limited.

5. Your rights (GDPR)

If you are in the UK or EU, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Export your data at any time via the Markdown export feature.
• Lodge a complaint with the ICO (UK) or your local supervisory authority.

To exercise any of these rights, email hello@subcreation.app.

6. Cookies

We use only essential cookies required for authentication and session management. See our Cookie Policy for details.

7. Third-party services

• Vercel: hosting and edge infrastructure.
• Neon: PostgreSQL database.
• Resend: transactional email delivery.

8. Changes to this policy

We may update this policy from time to time. Significant changes will be communicated by email. Continued use of the service after changes constitutes acceptance.