Privacy Policy
Last updated: October 17, 2026
At PiGenerate, we take your privacy seriously. This policy explains what data we collect, why we collect it, and how we protect it.
1. Information We Collect
1.1 Information You Provide
- Account data: email address and password hash (we never store plain passwords)
- Google Sign-In: email address from your Google account (we do not receive your Google password)
- Payment data: processed entirely by Creem (our Merchant of Record). We do not store card details.
- Prompts: text prompts you submit for image generation
- Generated images: stored on our servers so you can access them from your history
- Uploads: pictures and audio you upload for editing, 3D, animation or transcription
- Chat: conversations in the main AI Chat are stored only in your browser; each message is sent to the AI model you chose, and on our servers we keep only usage records (model, tokens, cost). The small helper chat on the generator page keeps its conversations on our server so you can continue them; you can delete them, and they are deleted with your account.
- Codpig and Arcade: your Codpig projects and memory, published games, comments, likes, leaderboard scores, cloud saves, nickname, avatar and bio
- Invites: which account invited which
1.2 Automatically Collected
- IP address: used for abuse prevention and rate limiting
- Session data: JWT tokens stored in your browser's localStorage
- Timestamps: when you created your account and made generations
1.3 What We Do NOT Collect
- We do not use third-party analytics that track you across the web
- We do not sell your data to anyone
- We do not use advertising trackers
2. How We Use Your Data
| Data | Purpose |
|---|
| Email | Account management, password reset, service updates |
| Password hash | Authentication (bcrypt-hashed) |
| Prompts | Image generation, content moderation |
| Generated images | Delivered to you, accessible in your history |
| IP address | Abuse prevention, rate limiting |
| Payment data | Handled by Creem for subscription billing |
3. Data Retention
We retain your data for as long as your account exists. You can delete your generation history at any time from the Account page. Deleting your account permanently removes all associated data within 30 days. Copies in our encrypted backups disappear within the same 30 days.
4. Data Sharing
We share limited data with:
- Creem — payment processing (only billing data)
- Google and Discord — Sign-In authentication (your email, and for Discord your username and avatar)
- AI model providers (OpenRouter, DeepSeek, xAI) — messages you send in Chat and Codpig, and pictures you attach there, are sent to these providers to get an answer. Image, video, 3D and audio generation runs on our own servers, except the premium image, video and audio models (Nano Banana, Grok Imagine, GPT Image, GPT Audio, Lyria): for those your prompt (and lyrics or text to speak) is sent to Google, xAI or OpenAI through OpenRouter.
- AI moderation (Google Gemini through OpenRouter) — comments, nicknames, bios, avatars, game covers and screenshots of published games are checked automatically for spam links, strong insults and adult content
- Web search (DuckDuckGo) — search queries when Codpig or the assistant searches the web for you
- Backups — encrypted copies of our databases on Google Drive and on our own server in Germany (encrypted before they leave our server, so neither Google nor the hosting company can read them), kept up to 30 days
- Piglets — what you write to your Piglets, the knowledge files you upload and what they see while working (web pages, screenshots) go to the AI provider (OpenRouter); spoken replies are made by a text-to-speech provider through OpenRouter. A Piglet's browser visits public websites for you — those sites see our server, not you. If you link Telegram, your Telegram user id and the messages and photos you exchange with the Piglets bot pass through Telegram. Webhook data, RSS feeds and result URLs you set are fetched or called by our server. We keep Piglet chats, tasks, files and remembered facts until you delete them, the Piglet or your account.
- Multiplayer — messages between players in an Arcade room are relayed in real time and not stored
- Law enforcement — only when legally required
We never sell your personal data.
Public content. Games you publish in the Arcade, your nickname, avatar, comments, likes and leaderboard scores are visible to everyone.
5. Security
We use industry-standard security: HTTPS encryption, hashed passwords (bcrypt), JWT tokens, and rate limiting. However, no system is 100% secure — use a strong unique password.
6. Your Rights (GDPR & CCPA)
You can delete your account yourself on the Account page ("Delete account"): your generations and their files, games, comments, profile, avatar and Pigcoins are removed right away.
Depending on your location, you have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and data
- Export your data in a portable format
- Object to certain processing
To exercise any of these rights, email pigenerate@gmail.com.
7. Cookies
PiGenerate uses only essential cookies for authentication (JWT stored in localStorage). We do not use advertising or tracking cookies. Your chat history, settings and an invite code you followed are kept in your browser's localStorage.
8. Children's Privacy
PiGenerate is not intended for users under 13. We do not knowingly collect data from children under 13. If you believe a child has created an account, contact us for removal.
8a. Payment records
When you buy a plan or credits, we keep a record of the purchase (what was bought, when, the amount, refunds) and of changes to your balance, so we can answer questions about your account. Tax and accounting law may require us to keep purchase records for several years even after you delete your account; they are kept without your prompts or creations.
9. International Transfers
Your data may be processed on servers located in Germany (VPS) and Türkiye (home server). Chat messages and premium generations are processed by AI providers, mainly in the USA and China (through OpenRouter: Google, OpenAI, xAI, DeepSeek, Zhipu, Alibaba and others), and encrypted backups are stored on Google Drive. By using the Service, you consent to this transfer.
10. Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the Service constitutes acceptance.