Privacy Policy
Last updated: June 2, 2026
We built Voxel-AI to be a tool you can trust. This page explains exactly what information we collect, why we collect it, and how it stays safe. We've kept the language plain on purpose — if something is unclear, reach out and we'll explain it.
What information we collect
When you create an account we collect:
- Your name and email address, used to identify your account
- A hashed password if you signed up with email, or your OAuth provider's unique ID if you signed up with Google or GitHub
While you use the platform we also collect:
- Which features you use (e.g. generate, editor, gallery) and rough interaction patterns — things like "a button was clicked" or "a generation was started", not what you typed
- Error and diagnostic reports when something goes wrong, so we can find and fix bugs
- Cookies and similar storage set by us and by PostHog (our analytics provider) to keep you signed in and understand how the product is used
- Basic technical information: your browser type, device type, and country — never your precise location
How we use your information
Your account information lets us identify you, let you log in, and show you your saved projects and gallery items.
The usage data and error reports are analysed internally only to operate the platform, fix bugs, and understand how features are used so we can improve them. For example, knowing that a lot of people use the Minecraft generation style tells us to invest more in that area. We never use this data for advertising, to build marketing profiles, or to sell to third parties.
We rely on a small number of service providers to run Voxel-AI: Supabase (authentication and database), PostHog (product analytics and error reporting), Stripe (payment processing), Cloudflare R2 (file and model storage), and RunPod (running our AI generation models). Each processes data only as needed to provide its part of the service, under its own privacy policy and our data processing agreements with it. PostHog is configured not to share your data with outside parties. You can opt out of analytics at any time using the cookie banner — everything on the platform continues to work normally if you do.
AI training — what we do and don't do
We run our own AI models to power the generation feature. Here is exactly how your content relates to those models:
- Private submissions are never used for training. If you generate a model and keep it private, or if you save something to your personal library without publishing it, that content is not used to train any AI model — ever.
- Public submissions are only used for training if they are tagged as AI-generated. When you publish a model to the public gallery, you can tag it as AI-generated. Only models with that tag may be included in future training runs. Models you create by hand (without AI) will never be used for training, even if they are public.
We do not sell access to your content to third-party AI companies. We do not use your private prompts or uploaded reference images to train anything.
Data sharing
We do not sell, rent, or trade your personal information. We do not share it with advertisers. The only cases where data may leave our systems are:
- Service providers who help us run the platform — Supabase (authentication and database), PostHog (analytics and error reporting), Stripe (payments), Cloudflare R2 (storage), and RunPod (AI generation) — bound by their own terms and privacy policies, and by our data processing agreements with them
- If required by law (e.g. a court order) — in that case we would notify you unless prohibited from doing so
Your rights
You can at any time:
- Request a copy of the personal data we hold about you by emailing us
- Ask us to correct inaccurate information
- Delete your account — this removes your profile, saved projects, and all personal data we hold. Public gallery items you published may remain visible but will be de-attributed
- Opt out of usage analytics via the cookie banner at the bottom of the page
Cookies
We use a small number of cookies. Some are strictly necessary for the platform to work (like keeping you signed in via Supabase authentication). Others are set by PostHog so we can understand how the platform is being used and capture error reports — you can decline those and the platform will still work fully.
Contact
Questions about this policy? Email us at [email protected]. We'll respond within 5 business days.