Privacy

What we collect

Only what running the product requires. There is no hidden profile being built beside your account.

• Your account: the email address, name and avatar your Google or GitHub sign-in gives us.
• What you make: the descriptions you write, the images and videos generated from them, and the names of your projects.
• Optional answers: if you tell us your app's address or how you heard about us, we keep that. Both are skippable and neither affects the product.
• Billing state: which plan you are on, your credit balance, and an identifier from our payment provider. We never see or store your card details.
• Ordinary server logs, produced by the infrastructure serving the site.

Where your data is kept

Your account and your projects are stored in a managed Postgres database hosted in London, in the United Kingdom.

The images and videos you generate are stored separately, in Cloudflare's object storage, on infrastructure held within the European Union.

The site itself is served from Cloudflare's edge network, so the request that draws a page may be handled by a server close to you, anywhere in the world.

Payments are handled by Mollie, a payment provider in the Netherlands. Card details go to them directly and never reach us.

How generation works

Generating an image or a video needs specialist hardware we do not run ourselves. When you generate something, your description and any artwork it builds on are sent to our generation provider, which returns the result. That provider processes the request on infrastructure in the European Union and the United States, depending on what is being generated.

It is used to draw your character and nothing else. Your work is not added to any training set, ours or anyone else's.

What we do not do

This list is short on purpose, and each line is a decision rather than an aspiration.

• We run no third-party analytics, no advertising pixels and no session recording. Nothing on this site reports your behaviour to anyone else.
• We do not sell your data, and we do not share it for advertising.
• We do not train models on your mascots.
• We do not read your projects except when you ask us for support and we need to look.

Cookies

Only the ones the product cannot work without: one that keeps you signed in, one that remembers whether you chose light or dark, and a short-lived one that holds the description you typed on the front page while you sign in. There are no advertising or tracking cookies, which is why this site never asks you to accept any.

How long we keep it

Your account and your artwork stay until you delete them. Delete your account and we remove your personal data and your generated work.

Records we are required to keep for tax and accounting, such as invoices, are held for as long as the law requires and no longer.

Your rights

Under the GDPR you can ask for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict how it is used, or object to a use entirely. Ask and we will do it; we will not make you prove why.

If you think we have handled your data badly, you can complain to your local data protection authority. We would rather you told us first, but it is your right either way.

Children

MascotLab is not intended for anyone under 16, and we do not knowingly hold data about children.

Changes

If this policy changes in a way that affects you, we will say so rather than quietly moving the date at the top.