Privacy Policy

Last updated: 2026-05-10

This is a placeholder Privacy Policy. Replace with one drafted by counsel that reflects your actual data-handling practices before launch.

What we collect

• Account: email address, hashed password, signup timestamp
• Subscription: tier, billing period start, mods used, payment status
• Card fingerprint: a one-way hash of card number on trial signup (we cannot reconstruct the card number from this hash). Used solely to detect trial abuse.
• Mod prompts: the text you submit to the mod-maker, plus the resulting Java source we generate
• Chat history: messages between you and Ender AI
• UI preferences: theme, language, dyslexic mode, biome, hover colour
• Custom biome uploads: image files you upload as backgrounds
• Server logs: IP address, user-agent, timestamps (kept 30 days)

What we do with it

• Run the service (build mods, send chat replies, take payment)
• Detect abuse (rate-limiting, fraud detection, trial-farm prevention)
• Send transactional email (verification, password reset, receipts). We do not send marketing email without separate opt-in.

Third parties

• Anthropic — your mod prompts and chat messages are sent to Claude for response generation, subject to Anthropic's policies.
• Stripe — card details go directly to Stripe; we never see the full number.
• Email provider (Resend / Postmark / similar) — used only for transactional email.
• minecraft.wiki — chat tool calls hit the public wiki API.

Your rights (GDPR / CCPA)

You can export all data we hold on you, or delete your account entirely, from Settings → Account. Deletion removes your user row, subscription, mods, chat history, custom biomes, and voucher redemptions immediately.

Cookies

We use a single first-party session cookie for authentication. No tracking cookies, no advertising cookies. The first time you visit you'll see a one-line banner confirming this.

Contact

Privacy questions: privacy@ender.app.