Privacy policy

We run Stonecut Studio. We decide how your data is used, and we are the ones to ask about it: email support@stonecut.studio.

The person in charge of protecting personal information at Stonecut Studio can be reached at support@stonecut.studio.

• Your email address, to sign you in and to write to you about your account.
• Sign-in provider ids: when you sign in with Google or Discord, the account id that service gives us, and the basic profile it shares, such as the name and picture on that account. We do not show these anywhere today.
• A display name, only if we add comments, and only the name you choose.
• Your prompts and maps: what you type, the plans and maps the AI builds, their versions and the progress messages of each build.
• Usage and credits: your plan, what each build used and when it ran.
• Your IP address, to limit how many sign-in requests come from one place, and in short-lived security logs.

We do not use analytics today. If we add basic analytics later, we will list them here first.

When payments start, Paddle handles your card and billing details. We get what we need to run your plan, such as which plan you have and whether it is active, never your full card number.

• To run the service you signed up for: signing you in, building and showing your maps, keeping track of your credits.
• To keep the service safe: limits on requests, stopping abuse and attacks.
• To handle payments and keep the records the law asks for.
• To answer you when you write to us.

We do not sell your personal data and we do not use it for advertising.

These companies process data for us, only to run the service:

• Vercel hosts the website.
• Supabase runs sign-in and our database, in the United States (US East, us-east-1).
• Cloudflare R2 stores your map files.
• Railway runs the workers that build maps, in the United States (US East).
• Upstash runs our rate limits. It holds IP addresses, and the email address each sign-in link goes to, for less than an hour.
• Resend sends the sign-in emails.
• Anthropic is the AI that builds the maps. Your prompts and map plans are sent to it.
• Paddle handles payments as our merchant of record, once plans go on sale.

Most of these companies are based in the United States, so your data is stored and processed outside Quebec and Canada. Before sharing it, we checked that each company protects it with contract terms and security suited to the data, as Quebec privacy law asks. For people in the EU and the UK, these transfers rely on each company's standard contractual clauses or an equal safeguard.

• Your maps, prompts and their versions: until you delete them or your account. You can ask us to delete a single map.
• When you delete your account, we remove it together with your maps, their files, your prompts and your usage records.
• Rate-limit entries: less than an hour.
• Security and server logs: a short time, then they are deleted.
• Payment records: Paddle keeps them as long as tax law requires.

Backups made by our database provider can hold a copy for a short time after you delete something, until they expire.

• See the data we hold about you.
• Get a copy of it to take with you.
• Have it corrected if it is wrong.
• Have it deleted.
• Object to how we use it, or ask us to use less of it.

You can delete your account and your maps yourself on the Account page.

For anything else, including a copy of your data, email support@stonecut.studio. We answer within one month.

If you live in the EU or the UK and think we got something wrong, you can also complain to your local data protection authority.

We only use the cookies that keep you signed in, plus a short-lived one while you sign in with Google or Discord.

No ad trackers and no tracking cookies from other companies, so there is no cookie banner to click through.

Stonecut Studio is for people 13 and older. In some countries, including some in the EU, you need a parent's or guardian's consent below a higher age, up to 16. Follow the law where you live.

If you think a child under 13 has an account, email us and we will delete it.

When we change this policy, we update the date at the top of this page. If a change matters for you, we tell you by email or on the site before it applies.

Email us at support@stonecut.studio.