Privacy Policy
Effective September 28, 2026
The short version
- We collect as little as possible: your email, a securely hashed password, your plan and your export history.
- Your photos never leave your computer. Photo, sketch, 3D crystal, shadow box and handwriting processing happens in your browser. The only pictures we store are ones you choose to Share, and you can delete them any time.
- Card payments are handled by Stripe, and we never see your card number.
- No analytics, and we never sell your data. Facebook ad measurement only runs if you click Accept.
- You can ask us to show you or delete your data at any time.
1. Who we are
[LEGAL NAME], doing business as Laser Generator, runs lasergenerator.com and app.lasergenerator.com (the “Service”). We are responsible for the personal information described here. Contact: support.
2. What we collect
| Information | Why we need it |
|---|---|
| Email address | To create your account, log you in, send receipts and important account or policy notices, and answer support requests. |
| Password | To secure your account. We store only a one-way scrypt hash, never the password itself. |
| Plan, credits and billing status | To know what you’ve paid for: your plan, billing interval, export credits, and Stripe customer and subscription IDs. |
| Export and trial history | Which studio you exported from, when, and the cost, plus which studios you’ve tried free. Used for export limits, your account history, and preventing abuse. |
| Payment records | Amount and date of each purchase, for bookkeeping and tax. |
| Designs you share | Only when you press Share: the product picture you chose, its title, the studio and design settings (so others can open the same design), a view count, and whether you asked to appear in the community gallery or weekly challenge. Share pages are public to anyone with the link; gallery entries are public after we review them. Delete them any time from Account → Your shared designs. |
| Badges and levels | Your XP, badges, day streak and which studios you’ve tried, so your progress follows you between devices. |
| AI Designer requests | The words you type or say into the AI Designer, sent to our AI provider to create the design, plus a daily count to enforce fair-use limits. |
| Technical data | Our web host keeps standard server logs (IP address, browser type, pages requested, time) for security and troubleshooting. |
What we don’t collect: your card details (Stripe handles them), your photos and uploaded images (processed only in your browser, unless you share a design), and your design settings (saved in your own browser’s local storage, except those included in a design you share).
3. Cookies and local storage
The app uses one essential cookie, kerf_session, which keeps you logged in. It lasts up to 30 days, or until you log out. We don’t use analytics cookies.
Ad measurement (optional): if you click Accept on our banner, the Meta (Facebook) Pixel sets its own cookies (such as _fbp) so we can see which of our ads bring visitors, sign-ups and purchases. If you click Decline, ignore the banner, or your browser sends a Global Privacy Control signal, it never loads. To change your choice, clear this site’s data in your browser.
The app also uses your browser’s local storage to remember your studio settings, theme and preferences. That data stays on your device, and you can clear it at any time in your browser settings. The WordPress website may set its own basic cookies, for example if you leave a comment.
4. Services we use
We share information only with the services needed to run Laser Generator:
- Stripe processes payments, subscriptions, receipts and billing management. Stripe receives your email and payment details under its own privacy policy.
- Meta (Facebook) Pixel, only if you accept, receives the pages and studios you view, sign-ups, checkout starts and purchase amounts, together with your IP address and browser details, under Meta’s privacy policy.
- InMotion Hosting hosts our website, app, database and shared design pictures.
- Anthropic receives the text of your AI Designer requests to generate the design, under Anthropic’s privacy policy. Don’t include personal details you don’t want processed.
- Social networks (Facebook, Pinterest, X, WhatsApp, Reddit) only receive a shared design’s link and picture if you press their share button, under their own privacy policies.
- Map and elevation services are contacted directly by your browser to draw maps: OpenStreetMap (Nominatim search, Overpass map data, map tiles), Esri / ArcGIS map tiles, and AWS Terrain Tiles. They see your IP address and the area or place you search for.
- Content delivery networks: jsDelivr (code libraries), Google Fonts (typefaces) and Hugging Face (the AI models for background removal and depth, which are downloaded to your browser and run there). They see your IP address when your browser downloads files from them.
We don’t sell or rent personal information. The only advertising-related sharing is the optional Meta Pixel described above, and only after you accept. We may disclose information if the law requires it, to protect our rights or users’ safety, or as part of a sale or transfer of the business, in which case this policy continues to apply.
5. How long we keep it
We keep your account information while your account is open. If you ask us to delete your account, we delete your email, password hash, trial history, export history, badges and shared designs within 30 days. We keep payment records only as long as tax and accounting laws require (usually up to 7 years). Server logs are kept for a short period set by our host.
6. Your rights and choices
Wherever you live, you can ask us to:
- tell you what personal information we hold about you, and give you a copy
- correct your information
- delete your account and personal information
Email support from your account’s email address and we’ll reply within 30 days. You can change your password in the app under Account, and manage or cancel billing under Account → Manage billing.
California residents: we don’t sell personal information. If you accept the Meta Pixel, activity on our site may be shared with Meta to measure our ads, which California law may treat as “sharing”. You can decline it, withdraw by clearing site data, or use Global Privacy Control, and we won’t treat you differently for exercising your privacy rights. EU / UK residents: we process your data to provide the Service you signed up for (contract), to meet legal obligations (tax records), and for our legitimate interest in keeping the Service secure. You may also complain to your local data protection authority. Your data is stored and processed in the United States.
7. Security
All connections use HTTPS. Passwords are stored as salted scrypt hashes, session cookies are Http Only and Secure, and payment details stay with Stripe. No system is perfectly secure, but if a breach affects your personal information we’ll notify you as the law requires.
8. Children
The Service is not directed at children under 13, and we don’t knowingly collect their personal information. If you believe a child under 13 has created an account, contact us and we’ll delete it.
9. Changes to this policy
If we change this policy, we’ll update the date at the top. If a change is significant, we’ll let account holders know by email or in the app before it takes effect.
10. Contact
Privacy questions or requests: support
Laser Generator · [CITY, STATE, USA]
See also our Terms of Service and About & refund policy.