Last updated: April 15, 2026
Chitmunk is operated by [YOUR LEGAL ENTITY NAME] ("we," "us," or "our"). This Privacy Policy describes how we collect, use, share, and protect your personal information when you use the Chitmunk web application and related services (the "Service").
By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Service.
For privacy questions or to exercise your rights, contact us at [email protected].
Chitmunk is a browser-first application. Your designs, images, and project data are stored locally on your device by default. Data only leaves your browser when you explicitly choose to save to Chitmunk Cloud, sync with Google Drive or OneDrive, use AI image generation, or when you sign in (which requires sending account data to our authentication provider). We collect analytics only with your consent. We do not sell your personal information.
| Category | Data | Purpose |
|---|---|---|
| Account information | Name, email address, profile picture (from Google, Microsoft, Apple, or email sign-in via Clerk) | Authentication, account management, displaying your identity in collaboration |
| Payment information | Billing name, payment method, transaction history (processed by Stripe via Clerk; we never see or store your full card number) | Processing Pro subscription payments |
| Cloud project data | Project files (designs, images, fonts, CSV data) that you choose to save to Chitmunk Cloud | Providing cloud storage, sharing, and collaboration features |
| Collaboration data | Email addresses of people you invite to collaborate; share roles and permissions | Managing project access and sending invitation emails |
| Communications | Emails you send to us (support requests, feedback) | Responding to your inquiries |
| AI prompts | Text prompts you enter for AI image generation | Generating images via Cloudflare Workers AI through our API |
| Category | Data | Purpose | Consent Required |
|---|---|---|---|
| Analytics data | Pages viewed, features used, session duration, browser type, OS, screen size, approximate location (country/city, anonymized by Google) | Understanding usage patterns and improving the Service | Yes — only collected if you click "Accept" on the consent banner |
| Error data | JavaScript error messages, source file, line/column number (sent as GA4 events) | Identifying and fixing bugs | Yes — same consent as analytics |
| Presence data | Your user ID, cursor position, and selected elements during live collaboration sessions | Enabling real-time collaboration with other users | No — necessary for the collaboration feature you activated |
| Audit logs | User ID, project ID, action type (save, share, delete), timestamp | Security monitoring and abuse prevention | No — legitimate interest |
The following data is stored in your browser's localStorage and IndexedDB and never leaves your device unless you explicitly save to the cloud or a third-party service:
We have no access to browser-stored data. Clearing your browser data removes it permanently.
We use personal information for the following purposes:
We do not use your personal information for advertising, profiling, or automated decision-making. We do not use your content or prompts to train AI models.
We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
We share personal information only in these circumstances:
We use the following third-party services to operate Chitmunk. Each processes data on our behalf under contractual obligations to protect your information:
| Provider | Role | Data Shared | Privacy Policy |
|---|---|---|---|
| Clerk | Authentication, session management, billing | Name, email, profile picture, subscription status | clerk.com/legal/privacy |
| Stripe (via Clerk) | Payment processing | Billing name, payment method, transaction details, device/behavioral data for fraud prevention | stripe.com/privacy |
| Cloudflare | Hosting, API infrastructure, cloud storage (Workers, R2, D1, Durable Objects) | Cloud project data, account metadata, IP address (for request routing) | cloudflare.com/privacypolicy |
| Google Analytics 4 | Usage analytics (consent required) | Pages viewed, features used, browser/OS info, anonymized IP, approximate location | policies.google.com/privacy |
| Resend | Transactional email | Recipient email address, inviter name, project title | resend.com/legal/privacy-policy |
When you optionally connect these services, data flows directly between your browser and the third party:
| Service | Data Shared | Your Control |
|---|---|---|
| Google Drive & Sheets | Project files, spreadsheet data (via OAuth scopes: drive.appdata, drive.file) |
Revoke access in Google Account settings at any time |
| Microsoft OneDrive & Excel | Project files, spreadsheet data (via OAuth scope: Files.ReadWrite) |
Revoke access in Microsoft Account settings at any time |
| TheGameCrafter | Card artwork, your TGC credentials (stored locally, never on our servers) | Remove credentials from Chitmunk settings at any time |
| Cloudflare Workers AI | Text prompts (proxied via our API, not stored) | Use is optional; prompts are not retained by us |
| Google Fonts | Font family names requested (loaded via Google's CDN) | Standard browser request |
| Iconify | Icon search queries | Standard browser request |
| Cookie | Provider | Purpose | Duration | Consent Required |
|---|---|---|---|---|
_ga |
Google Analytics | Distinguishes unique visitors | 2 years | Yes |
_ga_<ID> |
Google Analytics | Persists session state | 2 years | Yes |
__session, __client_uat |
Clerk | Authentication session | Session | No (strictly necessary) |
No analytics cookies are set by default. When you first visit Chitmunk, a consent banner asks whether you accept analytics. If you decline or ignore the banner, no tracking cookies are set and no analytics data is collected.
Your consent choice is stored in your browser's localStorage (chitmunk_analytics_consent) and is not sent to our servers.
We honor the Global Privacy Control browser signal. If your browser sends a GPC signal, we treat it as a request to opt out of any sale or sharing of personal information (though we do not sell or share your data for advertising in any case).
| Data Type | Retention Period |
|---|---|
| Account data (Clerk) | While your account is active, plus 30 days after deletion request |
| Payment and billing data (Stripe) | Per Stripe's retention policy and applicable tax/financial regulations (typically 7 years) |
| Cloud project data (R2/D1) | While your account is active. Deleted within 30 days of account closure, plus additional time for backups to cycle. |
| Soft-deleted cloud projects (trash) | 30 days, then permanently deleted by automated garbage collection |
| Share invitation data | Pending invites expire after 7 days. Consumed invite metadata retained for audit purposes while the share relationship exists. |
| Analytics data (GA4) | 14 months (Google's automatic deletion), then purged |
| Audit logs | 12 months, then purged |
| Transactional email records (Resend) | Per Resend's retention policy |
| Browser-stored data (localStorage, IndexedDB) | Until you clear your browser data; we have no control over this |
We implement reasonable technical and organizational measures to protect your personal information, including:
No system is 100% secure. If you discover a security vulnerability, please report it responsibly to [email protected].
Our service providers process data in the United States and other countries. When personal data is transferred outside the EU/EEA or UK, we rely on the following safeguards:
Regardless of where you live, you can:
Under the General Data Protection Regulation, you also have the right to:
Legal bases for processing (GDPR Article 6):
| Processing Activity | Legal Basis |
|---|---|
| Providing the Service (authentication, storage, collaboration) | Performance of contract (Art. 6(1)(b)) |
| Processing payments | Performance of contract (Art. 6(1)(b)) |
| Analytics and usage tracking | Consent (Art. 6(1)(a)) |
| Security monitoring and audit logs | Legitimate interest (Art. 6(1)(f)) |
| Sending transactional emails (share invitations) | Performance of contract (Art. 6(1)(b)) |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c)) |
If you are a California resident, the California Consumer Privacy Act and California Privacy Rights Act provide you with the following rights:
Categories of personal information collected in the preceding 12 months:
| CCPA Category | Examples | Sold or Shared for Advertising |
|---|---|---|
| Identifiers | Name, email address, account ID | No |
| Commercial information | Subscription plan, payment history | No |
| Internet or electronic network activity | Pages viewed, features used (with consent) | No |
| Geolocation data | Approximate location derived from IP (anonymized, with consent) | No |
| Audio, electronic, visual information | Profile picture (from SSO provider) | No |
| Professional or employment-related information | Not collected | N/A |
| Sensitive personal information | Not collected | N/A |
Residents of Virginia, Colorado, Connecticut, Texas, Oregon, Montana, and other states with comprehensive privacy laws have similar rights to access, delete, correct, and opt out. We honor these rights for all US residents.
To submit a privacy request:
You may also designate an authorized agent to make requests on your behalf. The agent must provide proof of authorization.
Chitmunk is not directed at children under 16. We do not knowingly collect personal information from anyone under 16 years of age. If you are a parent or guardian and believe your child has provided personal information to us, please contact [email protected] immediately. We will promptly investigate and delete any such information.
When you use AI image generation features:
In the event of a data breach that affects your personal information:
The Service may contain links to third-party websites or services (such as TheGameCrafter and Google Drive). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing them with personal information.
We may update this Privacy Policy from time to time. When we make material changes:
We encourage you to review this policy periodically. Your continued use of the Service after the updated policy takes effect constitutes your acknowledgment of the changes.
Privacy inquiries: [email protected]
General inquiries: [email protected]
Security issues: [email protected]