What PNGTuberMaker collects, what is sent to our AI providers, and how to delete it
2026/08/30
This policy explains what PNGTuberMaker (pngtubermaker.net) collects, what we do with it, and who else sees it. It is written to be read, not to be survived.
PNGTuberMaker is built and run by an independent developer, not a company, and that person is the controller of your personal data. For anything in this policy — including a request to see or delete what we hold — email support@pngtubermaker.net.
When you generate a character, your prompt is sent to a third-party AI company. It has to be — we do not run image models ourselves. The section Prompts and images go to AI providers names exactly who receives it and what they get. If you would not be comfortable with a prompt leaving our servers, do not submit it.
From your Google account, when you sign in. Sign-in is Google only. Google gives us your name, your email address, your profile picture and your Google account identifier. We also store the sign-in tokens Google issues, so you stay signed in. We never receive your Google password.
What you type. Your prompts, the character names and options you choose, the model and resolution you pick, and the drafts you leave unfinished.
What you generate. The PNG frames the AI provider returns, plus the generation record behind them — which model ran, when, whether it succeeded, and what it cost in credits.
What you buy. Which credit pack or plan you bought, when, the amount, and the identifiers our payment provider gives us for the transaction. For a plan we also keep its status and the start and end dates of the period you are in, so the site can show you what you are on. We never see or store your card number, expiry date or security code.
A profile picture, if you upload one. Optional; it replaces the picture Google gave us.
Ordinary technical data. IP address, browser and device type, and request logs, kept for security, abuse prevention and debugging. Our servers do not write your prompts into these logs.
We do not buy personal data from anyone, and we do not sell yours.
To generate an image, we send your request to Kie (kie.ai), an AI model platform, which runs it on the model you selected. Today those models are:
Each family covers both the model that makes a character from text and the one that makes further frames from an image you already generated, so a frame pack reaches the same family as the character it came from.
What is sent with your request:
What is not sent: your name, your email address, your Google identifier, or anything about your credit balance or payments. One caveat, stated plainly: the temporary image link above contains our own internal account identifier as part of its path. It is a random internal string — not an email, not a name — but it is technically an identifier, and we would rather tell you than not.
These companies process your prompt under their own terms and privacy policies. We do not control how long they keep it or whether they use it to improve their own models — that is their policy, not ours. If that matters to you, read theirs before you generate.
| Who | What they do | What they get |
|---|---|---|
| Sign-in | Your sign-in with them; they tell us your name, email and picture | |
| Kie (kie.ai) | Runs AI image generation on OpenAI, Google and Recraft models | Prompts, generation settings, temporary image links |
| Stripe | Payments | Your name, email, our internal account id, and your card details, which go straight to Stripe and never touch our servers |
| Cloudflare (R2) | Stores generated images | The image files |
| Supabase | Hosts our database | Everything in the "What we collect" section except the image files |
| Vercel | Hosts and serves the site | Requests to the site, including IP addresses |
We use no advertising networks, no data brokers and no cross-site trackers.
Generated images live in a private Cloudflare R2 bucket that is not publicly readable. There is no public URL for your images. When you view or download one, we check that the account asking owns it and then issue a signed link that expires in five minutes.
Your profile picture is whatever your Google account provides, served by Google. We do not host it.
Everything else lives in our PostgreSQL database, hosted by Supabase. Access is restricted to the running application and to the one developer who operates it.
Prompts and signed image links are deliberately kept out of our server logs and error reports.
Your data is processed in the United States and in other countries where the providers listed above operate. If you are in the UK, EU or EEA, that means your data is transferred outside your country; we rely on those providers' standard contractual clauses and equivalent safeguards.
No system is perfectly secure, and we will not pretend otherwise. If a breach affects your data, we will tell you.
If you are in the UK, EU or EEA, our legal bases are:
We do not run advertising or profiling, so we do not rely on consent for it.
While your account exists, we keep it. Your prompt history and generated characters are kept because they are the product — you come back to revisit, download and remix them. We do not currently delete them on a fixed schedule.
When you delete your account — from Settings → Security — we delete your account record, your prompts and drafts, your character and generation records, and your credit and payment records from our database.
Three honest exceptions:
Backups and server logs roll off on their own schedule and are not searched to resurrect deleted data.
Whoever and wherever you are, you can ask us to:
Delete and export you can do yourself: account deletion is in Settings → Security, and your characters are downloadable from your history. For anything else, email support@pngtubermaker.net. We will respond within one month, and we will not charge you for it.
If you are in the UK, EU or EEA and you are not satisfied with our answer, you can complain to your national data protection authority. We would rather you came to us first.
PNGTuberMaker is not intended for children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, email us and we will delete it.
See the Cookie Policy. Short version: the only cookies this site sets are the ones needed to keep you signed in and to remember your interface preferences. We run no analytics or advertising cookies.
We may update this policy. When we do, we change the date at the top of this page. If a change materially affects what happens to your data — a new AI provider, a new category of data, a new purpose — we will say so before it takes effect rather than quietly editing the page.
support@pngtubermaker.net — for access, deletion, correction, or anything else in this policy.