Privacy

What we collect

Only what running the product requires. There is no hidden profile being built beside your account.

• Your account: the email address, name and avatar your Google or GitHub sign-in gives us.
• What you make: the descriptions you write, the images and videos generated from them, and the names of your projects.
• Optional answers: if you tell us your app's address or how you heard about us, we keep that. Both are skippable and neither affects the product.
• Billing state: your credit balance and an identifier from our payment provider. We never see or store your card details.
• Ordinary server logs, produced by the infrastructure serving the site.

Where your data is kept

Your account and your projects are stored in a managed Postgres database hosted in London, in the United Kingdom.

The images and videos you generate are stored separately, in Cloudflare's object storage, on infrastructure held within the European Union.

The site itself is served from Cloudflare's edge network, so the request that draws a page may be handled by a server close to you, anywhere in the world.

Payments are handled by Polar, which acts as the merchant of record: they are the seller on your receipt, they collect any applicable VAT, and card details go to them directly and never reach us.

The small amount of usage data described below goes to PostHog, on their European Union servers.

How generation works

Generating an image or a video needs specialist hardware we do not run ourselves. When you generate something, your description and any artwork it builds on are sent to our generation provider, which returns the result. That provider processes the request on infrastructure in the European Union and the United States, depending on what is being generated.

It is used to draw your character and nothing else. Your work is not added to any training set, ours or anyone else's.

What we do not do

This list is short on purpose, and each line is a decision rather than an aspiration.

• We run no advertising pixels and no session recording. We never record your screen, and nothing here follows you to another site.
• We do use one analytics tool, PostHog, on servers in the European Union, to count things like how many people reached the pricing section. It is set to forget you the moment you close the tab, so it cannot recognise you on a later visit and there is nothing about you for it to keep.
• We do not sell your data, and we do not share it for advertising.
• We do not train models on your mascots.
• We do not read your projects except when you ask us for support and we need to look.

Cookies

Only the ones the product cannot work without: one that keeps you signed in, one that remembers whether you chose light or dark, and a short-lived one that holds the description you typed on the front page while you sign in. There are no advertising or tracking cookies, which is why this site never asks you to accept any.

Our analytics deliberately uses no cookie at all. It keeps a temporary number in your browser's tab memory, which your browser discards when the tab closes, so it lasts one visit and cannot be used to recognise you afterwards. That choice is the reason you are not reading this in a banner.

How long we keep it

Your account and your artwork stay until you delete them. Delete your account and we remove your personal data and your generated work.

Records we are required to keep for tax and accounting, such as invoices, are held for as long as the law requires and no longer.

Your rights

Under the GDPR you can ask for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict how it is used, or object to a use entirely. Ask and we will do it; we will not make you prove why.

If you think we have handled your data badly, you can complain to your local data protection authority. We would rather you told us first, but it is your right either way.

Children

MascotLab is not intended for anyone under 16, and we do not knowingly hold data about children.

Changes

If this policy changes in a way that affects you, we will say so rather than quietly moving the date at the top.