Privacy Policy

Effective: March 2026 ยท Last updated: October 2026

What We Collect

When you use BloxGFX, we collect your email address, basic account details, IP address, hashed device and network signals (used to detect duplicate accounts and abuse), and data related to your usage such as generation history and credit balance. If you subscribe to a paid plan, we also process payment metadata through our payment provider. We never store your full card number.

Why We Process Your Data

We use your information to operate the platform, handle billing and subscriptions, detect and prevent misuse, and meet any legal requirements that apply to us.

Who Has Access

We work with a small number of service providers who help us run BloxGFX. This includes Stripe for payments (acting as an independent controller), cloud infrastructure providers, AI generation services, and email delivery tools. Each provider is bound by data protection agreements.

Where Your Data Goes

Some of our providers operate outside the EU/EEA, including in the United States. When transfers occur, they are protected by Standard Contractual Clauses or equivalent safeguards.

How Long We Keep It

Your account information stays as long as your account is active. When you delete your account, we immediately cancel any subscription and delete your profile, credits, conversations, generated images, uploads, email preferences and referral codes, then your login itself. A few things are kept after deletion: support and reward messages are kept with your name, email and message text removed; if someone else signed up with your referral code, that record is kept without your identity; hashed device and network signals are kept for 90 days to stop people deleting and re-creating accounts to abuse free credits (our legitimate interest in preventing fraud), then deleted; an email address that unsubscribed or bounced stays on our do-not-email list; and Stripe keeps billing records for as long as tax law requires. Deleted data can remain in our hosting provider's encrypted backups for a short time until those backups expire.

Your Rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or export your data. You can also object to certain processing or withdraw consent at any time. You can download a copy of your data and permanently delete your account yourself at any time from the Account page in your dashboard. For anything else, or if you can't sign in, email us at support@bloxgfx.com.

Legal Basis

We rely on contractual necessity (to provide the service you signed up for), legal obligations, legitimate interests (like fraud prevention), and consent where applicable.

Cookies

We use cookies for essential functions and, with your permission, for analytics and marketing. Full details are in our Cookie Policy.

Children's Privacy

BloxGFX is not intended for children under 13. We do not verify age at signup beyond asking you to confirm in our Terms that you are 13 or older. Many of our users are teenagers, and anyone under 18 needs a parent's or guardian's permission to make purchases.

For all users, including teens, we collect only what the service needs: email address, account and usage details (such as your prompts, generated images and credit balance), IP address and a device identifier we use to detect abuse and duplicate accounts, and payment metadata from Stripe if you buy something. We use error monitoring (Sentry) and our email provider to send account and service emails. Product analytics (PostHog) run only if you accept analytics cookies. We do not sell personal data and we do not show third-party ads on BloxGFX. If you accept marketing cookies, our advertising conversion tag (Google Ads) may count a sign-up or purchase for our own ad campaigns.

Parents and guardians: if you want to see or delete your child's account and data, or you believe a child under 13 has an account, email support@bloxgfx.com and tell us the account email. We may ask for a little information to confirm who you are before acting. If we learn that an account belongs to someone under 13, we will delete it and its data.

Security

We use industry-standard measures to protect your data, including encryption in transit and secure infrastructure.

Updates

We may revise this policy from time to time. If something changes significantly, we will let you know.