Privacy

Updated September 13, 2026. This policy describes current beta behavior and requires attorney/privacy review before commercial launch or any deliberate under-13 offering.

What we store

We store account identifiers and email from sign-in; builds, component facts, descriptions, uploaded Original Build photographs, generated images, selections, publication and roster state; generation requests, validation, usage and cost records; product analytics events; reports, copyright notices, moderation records, and deletion records. Copyright notices contain the contact and declaration information the submitter enters. A secure cookie keeps work attached to a session. Guest and unfinished work may also be stored in the browser and claimed during sign-in.

Processing and visibility

Supabase stores account, product, and private image data. Vercel hosts the application. Configured AI providers process source images, build facts, creator direction, and generated output when recognition or generation is requested. Drafts and nonselected generated candidates remain private to the creator. Publishing makes the selected Legend content public. Copyright notice information may be shared with the affected creator and advisers as needed to administer the claim.

What not to upload

Avoid faces, names, addresses, schools, documents, location clues, and other personal information. Accounts are for people 13 and older. Younger children should not create or independently operate accounts or submit personal information; see Family Use and Safety.

Voice descriptions

When you choose voice input, the recording is sent from our server to the configured transcription provider and is not saved as an audio file by Minifigure Legends. The returned transcript remains editable and is stored only if you continue with the Describe flow.

Product measurement

We record basic product actions, generation outcomes, operational logs, and usage to improve reliability, protect costly endpoints, and understand the beta. These records use account or session identifiers and event names; the current product does not use advertising profiles or session replay. Private prompts, descriptions, and photographs are not intentionally copied into product analytics events.

Retention and deletion

Use Account → Delete account. Sessions are revoked and Legends leave public view. Private builds, descriptions, and image access are cleared; storage and sign-in deletion are retried by an operator if a dependency is unavailable. Minimal usage, rights/moderation records, Arena ratings or votes, and lineage references may remain for security, legal, audit, and shared-history integrity after being detached from the display name and email where practical. Existing third-party copies of published material cannot be recalled. Independent backups are access-controlled and expire under the operator’s recovery schedule.

Processors and future billing

Current processors include Supabase, Vercel, Google for sign-in when selected, and configured AI providers for requested recognition and generation. Stripe remains in test mode; if live billing is enabled later, this policy and the billing copy must be reviewed before collecting payment data.

See Support for privacy or deletion questions.