Privacy Policy
Last updated: January 31, 2026
Overview
ThumbCraft ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Roblox thumbnail generation service.
Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Password (encrypted and never stored in plain text)
- Profile information (if you choose to provide it)
Generated Content
We store:
- Thumbnails you generate
- Reference images you upload
- Text prompts used for generation
- Generation history and metadata
IP Address Collection
We collect IP addresses for the following purposes:
- Fraud Prevention: Detect and prevent abuse of our free tier and credit system
- Security: Protect user accounts and detect unauthorized access
- Service Operation: Ensure quality of service and troubleshoot issues
What We Collect
- IP address at signup and login
- IP address during critical operations (thumbnail generation, uploads)
- User agent string associated with IP addresses
How Long We Keep It
- IP addresses are stored as long as your account is active
- Audit logs are retained for 90 days for security purposes
- All IP data is deleted when you delete your account
Your Rights
You have the right to:
- Access your IP data (contact support)
- Request deletion of your data (delete your account)
- Object to processing (contact support)
How We Use Your Information
We use collected information to:
- Provide and improve our thumbnail generation service
- Process your requests and manage your account
- Prevent fraud and abuse of the service
- Communicate with you about service updates
- Comply with legal obligations
Data Security
We implement industry-standard security measures to protect your data:
- Encrypted password storage
- Secure database connections (PostgreSQL)
- Protected API endpoints with authentication
- Regular security audits and updates
Third-Party Services
We use the following third-party services:
- Google Gemini AI: For thumbnail generation (your prompts and images are processed by Google's AI)
- Vercel: For hosting and file storage
These services have their own privacy policies and we recommend reviewing them.
Your Data Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your account and data
- Export your data (contact support)
- Opt-out of promotional communications
To exercise these rights, please contact us or delete your account from your profile page.
Data Retention
We retain your data for the following periods:
- Account data: Until you delete your account
- Generated thumbnails: Until you delete your account
- Uploaded reference images: Until you delete your account
- IP audit logs: 90 days from creation
- Session data: Until session expires or logout
Children's Privacy
ThumbCraft is not intended for users under the age of 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.
Contact Us
If you have questions about this Privacy Policy or your data, please contact us through your account profile page.