What PNGTuberMaker collects, what is sent to our AI providers, and how to delete it
2026/10/07
This policy explains what PNGTuberMaker (pngtubermaker.net) collects, what we do with it, and who else sees it. It is written to be read, not to be survived.
PNGTuberMaker is built and run by an independent developer, not a company, and that person is the controller of your personal data. For anything in this policy — including a request to see or delete what we hold — email support@pngtubermaker.net.
When you generate a character, your prompt is sent to a third-party AI company. It has to be — we do not run image models ourselves. The section Prompts and images go to AI providers names exactly who receives it and what they get. If you would not be comfortable with a prompt leaving our servers, do not submit it.
From your Google account, when you sign in. Sign-in is Google only. Google gives us your name, your email address, your profile picture and your Google account identifier. We also store the sign-in tokens Google issues, so you stay signed in. We never receive your Google password.
What you type. Your prompts, the character names and options you choose, the model and resolution you pick, and the drafts you leave unfinished.
What you generate. The PNG frames the AI provider returns, plus the generation record behind them — which model ran, when, whether it succeeded, and what it cost in credits.
Share pages you publish. If you share a character, we keep the share link you created, when you created it, and two running counts: how many times the page has been opened, and how many times its "Made with PNGTuber Maker" link has been followed. The counts are plain numbers. The page sets no cookie, and we record nothing about who opened it beyond the ordinary request logs described below.
What you buy. Which credit pack or plan you bought, when, the amount, and the identifiers our payment provider gives us for the transaction. For a plan we also keep its status and the start and end dates of the period you are in, so the site can show you what you are on. We never see or store your card number, expiry date or security code.
Ordinary technical data. IP address, browser and device type, and request logs, kept for security, abuse prevention and debugging. Our servers do not write your prompts into these logs.
We do not buy personal data from anyone, and we do not sell yours.
To generate an image, we send your request to Kie (kie.ai), an AI model platform, which runs it on the model you selected. Today those models are:
The family covers both the model that makes a character from text and the one that makes further frames from an image you already generated, so a frame pack reaches the same family as the character it came from.
What is sent with your request:
What is not sent: your name, your email address, your Google identifier, or anything about your credit balance or payments. One caveat, stated plainly: the temporary image link above contains our own internal account identifier as part of its path. It is a random internal string — not an email, not a name — but it is technically an identifier, and we would rather tell you than not.
These companies process your prompt under their own terms and privacy policies. We do not control how long they keep it or whether they use it to improve their own models — that is their policy, not ours. If that matters to you, read theirs before you generate.
| Who | What they do | What they get |
|---|---|---|
| Sign-in | Your sign-in with them; they tell us your name, email and picture | |
| Kie (kie.ai) | Runs AI image generation on OpenAI models | Prompts, generation settings, temporary image links |
| Stripe | Payments | Your name, email, our internal account id, and your card details, which go straight to Stripe and never touch our servers |
| Cloudflare (R2) | Stores generated images | The image files |
| Supabase | Hosts our database | Everything in the "What we collect" section except the image files |
| Vercel | Hosts and serves the site | Requests to the site, including IP addresses |
We use no advertising networks, no data brokers and no cross-site trackers.
Generated images live in a private Cloudflare R2 bucket that is not publicly readable. When you view or download one in the studio, we check that the account asking owns it and then issue a signed link that expires in five minutes.
The only addresses that show your images without signing in are links you create yourself: an OBS link, which lets your streaming software show your character, and a share page (see Share pages you create). Anyone who has one of these links can see that character's frames, so treat it like any private link. Resetting an OBS link from the OBS panel stops the old one at once, and a share page stops the moment you press Stop sharing.
Your profile picture is whatever your Google account provides, served by Google. We do not host it.
Everything else lives in our PostgreSQL database, hosted by Supabase. Access is restricted to the running application and to the one developer who operates it.
Our application never writes prompts, signed image links or the addresses of OBS links and share pages into its own logs or error reports. Our hosting provider's standard request logs do record the addresses that are requested, those of OBS links and share pages included, and delete them on the provider's own schedule.
Your data is processed in the United States and in other countries where the providers listed above operate. If you are in the UK, EU or EEA, that means your data is transferred outside your country; we rely on those providers' standard contractual clauses and equivalent safeguards.
No system is perfectly secure, and we will not pretend otherwise. If a breach affects your data, we will tell you.
A share page is a public web page for one of your characters. It exists only if you make it — by pressing Share on that character — and it is how you show your PNGTuber to other people.
If you are in the UK, EU or EEA, our legal bases are:
We do not run advertising or profiling, so we do not rely on consent for it.
While your account exists, we keep it. Your prompt history and generated characters are kept because they are the product — you come back to revisit, download and remix them. We do not currently delete them on a fixed schedule.
When you delete your account — from Settings → Security — we delete your account record, your prompts and drafts, your character and generation records, and your credit and payment records from our database. Every share page and OBS link you made stops working at the same moment; a share page's preview image can still be served from caches for up to an hour.
Three honest exceptions:
Backups and server logs roll off on their own schedule and are not searched to resurrect deleted data.
Whoever and wherever you are, you can ask us to:
Delete and export you can do yourself: account deletion is in Settings → Security, and your characters are downloadable from your history. For anything else, email support@pngtubermaker.net. We will respond within one month, and we will not charge you for it.
If you are in the UK, EU or EEA and you are not satisfied with our answer, you can complain to your national data protection authority. We would rather you came to us first.
PNGTuberMaker is not intended for children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, email us and we will delete it.
See the Cookie Policy. Short version: the only cookies this site sets are the ones needed to keep you signed in and to remember your interface preferences. We run no analytics or advertising cookies.
We may update this policy. When we do, we change the date at the top of this page. If a change materially affects what happens to your data — a new AI provider, a new category of data, a new purpose — we will say so before it takes effect rather than quietly editing the page.
support@pngtubermaker.net — for access, deletion, correction, or anything else in this policy.