Privacy Policy

PhotoMinecraft ("we", "us", or "our") operates the photominecraft.com website and the AI image transformation service that converts your photos into Minecraft-style images. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using PhotoMinecraft, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the service.

Account information: When you create an account, we collect your email address through our authentication provider (Supabase Auth). Your profile also stores whether you have used your free account generation.

Photos and generations: When you generate an image, we store your uploaded photo, the AI-generated result, and metadata about the generation (such as the prompt used and the date). Authenticated users can view their generation history in the dashboard.

Device and usage data: To offer one free generation without an account, we set a signed device cookie and create a hashed device identifier linked to your approximate network location. We also record rate-limit events to prevent abuse (up to five generation attempts per hour per user or device).

We use your data to provide the service: processing your photos with AI, delivering generated images, managing your token balance, saving your generation history, and preventing fraud or abuse.

We use your email to authenticate your account, send essential service communications (such as login links), and associate purchases with your account. We do not sell your personal data to third parties.

When you upload a photo, it is sent to OpenAI's image editing API (gpt-image-1) along with a transformation prompt to produce a Minecraft-style result. Your original image is transmitted to OpenAI solely for the purpose of generating the output.

We do not control OpenAI's internal data handling. OpenAI may process your image according to its own privacy policy and API data usage terms. We recommend reviewing OpenAI's policies if you have concerns about third-party AI processing.

The transformation prompt is defined by PhotoMinecraft and is not written by end users. Generated images are stored in our cloud storage and may be publicly accessible via their URL once created.

Original uploaded photos are stored in a private storage bucket accessible only to the account that created them (or to our systems for processing). Generated images are stored in a public bucket so you can download and share them.

We retain generation records, account data, and purchase history for as long as your account is active or as needed to provide the service and comply with legal obligations. You may request deletion of your account and associated data by contacting us.

We rely on trusted providers to operate PhotoMinecraft: Supabase (authentication, database, and file storage), OpenAI (AI image generation), and Stripe (payment processing). Each provider processes data according to its own privacy policy.

Payment information (such as card details) is collected and processed directly by Stripe. We do not store your full payment card details on our servers.

We use a device cookie (pm_device) to identify your browser for free-generation eligibility and abuse prevention. This cookie is httpOnly and signed. We also store your language preference in a locale cookie.

Authentication cookies are set by Supabase when you log in. You can control cookies through your browser settings, but disabling them may prevent you from using certain features such as the free anonymous generation.

Depending on your location, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. EU and UK residents may also have rights under the GDPR.

To exercise these rights, contact us at svnrnns@gmail.com. We will respond within a reasonable timeframe and in accordance with applicable law.

PhotoMinecraft is not directed at children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or how we handle your data, email us at svnrnns@gmail.com.