Privacy Policy
Effective July 17, 2026
This policy explains what information is involved when you browse the free site, accept analytics, place a paid order, upload a source image, or contact support.
Information used by the free site
The installer, gallery, tutorials, downloads, and copy buttons do not require an account. Hosting and security providers may process ordinary request information such as IP address, browser type, requested URL, timestamp, and security signals. Copy actions use the browser clipboard only after you choose a copy button. The website does not receive Codex conversations, project contents, local paths, API keys, or desktop credentials through the free install flow.
Analytics consent
Google Analytics 4 loads only after you choose Accept analytics. When accepted, Google may process page views, engagement events, device and browser information, approximate location derived from IP address, and identifiers used to measure sessions. Analytics storage is denied by default. Your choice is stored in your browser and can be changed with Cookie settings in the footer. Essential site features remain available when analytics is declined.
Paid checkout information
Creem is the payment processor and Merchant of Record for Skin Quick Setup and Custom Skin Early Access. Creem collects and processes checkout details such as name, email, billing country, payment method, order amount, tax, customer ID, checkout ID, and order status under its own privacy terms. This site receives the order identifiers, checkout email, purchased service, amount, currency, and payment status needed to verify and fulfill an order. Full payment-card details are not received or stored by this site.
Briefs and private image uploads
After a verified purchase, the brief may include platform, visual direction, color preference, notes, and one source image. Supabase stores order records and keeps uploaded source images in a private bucket that is not publicly readable. The image is used only to prepare, verify, and deliver the ordered configuration, resolve related support, or comply with a lawful obligation. Paid uploads are not added to the public gallery without separate permission.
Service providers and disclosures
Cloudflare hosts and protects the public website, Supabase provides database, Edge Function, and private storage services, Creem handles payment and tax processing, and Google provides optional analytics. Information may also be disclosed when reasonably necessary to comply with law, respond to valid legal process, protect users or the service, investigate fraud or abuse, or complete a business transfer with appropriate safeguards.
Advertising and Google cookies
The site may use Google advertising products after approval. If ads are enabled, third-party vendors including Google may place or read cookies, use web beacons, IP addresses, or other identifiers to serve, limit, measure, and personalize ads where consent and law allow. Before personalized advertising is enabled for regions that require it, the site will deploy the consent controls required by Google and applicable law. Visitors can also review Google advertising settings or opt-out tools. Personally identifiable information is not intentionally passed to Google in ad requests.
Retention and deletion
Order and payment records are kept for fulfillment, dispute handling, fraud prevention, accounting, and tax obligations. Briefs and source images are kept only as long as reasonably needed to produce and support the order; source uploads are normally removed after the delivery and support period. Analytics retention follows the configured Google Analytics settings. A verified request may ask for access, correction, or deletion, subject to records that must be retained for legal, tax, security, or dispute purposes.
Security and international processing
HTTPS is used in transit, private uploads are not exposed through a public storage policy, and payment webhooks are authenticated with signatures. No online service can guarantee absolute security. Providers may process information in countries other than the visitor's country, using their contractual and legal safeguards where required.
Children
This website is intended for a general developer and desktop-customization audience and is not directed to children under 13. It does not knowingly create behavioral advertising profiles from child-directed activity. A parent or guardian can request deletion if they believe a child submitted personal information.
Your choices and contact
You can decline analytics, clear the saved consent choice in your browser, avoid optional paid services, and refrain from uploading an image. For access, correction, deletion, consent, rights, or privacy questions, use the Contact page or email [email protected]. Verification may be required before accountless order information is disclosed or deleted.