Privacy Policy

1. Introduction

Welcome to AO3 Skin Generator ("we," "our," or "us"). We are committed to protecting your privacy and being transparent about how we handle your data.

This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data when you use our website and services at ao3skingen.wordfokus.com.

2. Information We Collect

2.1 Information You Provide Directly

Editable Projects: Editable project text and settings are stored in your browser using localStorage. Clearing browser data can delete this local copy.

Images You Upload: If you upload a file, that file is sent to our image-upload service and ImgBB. Images hosted there are publicly accessible to anyone with the link.

Hosted AO3 Image Code: If you choose “Get AO3 image code,” the finished rendered scene — including any visible story text — is uploaded to ImgBB so it has a public image address.

Image Addresses You Paste: Pasted image addresses are requested from their host for preview and may be sent to our image proxy when an export needs them. The proxy does not intentionally retain the address or image after the request.

Media Addresses You Paste: Link cards, voice messages, and videos are stored as web addresses. AO3 Skin Generator never downloads, copies, or re-hosts those files.

2.2 What Your Readers' Browsers Request

This section is about other people's browsers, not yours, and it applies after you publish.

When someone reads your posted work, their browser requests any media you referenced directly from whoever hosts it — so if that host removes the file or goes away, the work loses it, and AO3 keeps no copy. The same is true of the small pieces of interface artwork a scene uses, which are requested from this application's own address.

A YouTube video is embedded through YouTube's privacy-enhanced domain (youtube-nocookie.com) rather than the standard one. That is YouTube's own reduced-tracking mode; their terms still apply to your readers once a video plays.

Before you export, the pre-publication check tells you how many external hosts a scene depends on and warns you about addresses from services that are known to expire. We can check that an address is well formed and load a preview. We cannot promise that someone else's server will still be answering in a year.

2.3 Information Collected Automatically

Analytics Data: If you allow analytics, we use Google Analytics to understand how visitors interact with our service. This includes:

• Pages visited and features used
• Time spent on the site
• Browser type and version
• Device type (desktop, mobile, tablet)
• Geographic location (country/city level, not precise)
• Referral source (how you found us)

Analytics events may record which tool, template, and export type were used. We do not include story text, names, handles, image addresses, or generated code in those event parameters.

2.4 Information We Do NOT Collect

• We do not require accounts, so we don't collect names, emails, or passwords
• We do not store your generated skins, CSS, or HTML on our servers
• We do not track you across other websites
• We do not sell your data to third parties

3. How We Use Your Information

We use the limited information we collect to:

• Improve the service: Analytics help us understand which features are popular and where users encounter issues
• Fix bugs: Error tracking helps us identify and resolve technical problems
• Provide the service: Image hosting via ImgBB enables uploads and the “Get AO3 image code” export
• Make strategic decisions: Usage patterns inform which features to build next

4. Data Storage and Security

4.1 Local Storage

Your creative work is stored in your browser's localStorage. This means:

• The editable project stays in this browser unless you choose a feature that uploads content
• Hosted image exports contain the visible rendered scene, but not the editable project file
• Clearing your browser data will delete your saved work
• Different browsers/devices have separate storage

4.2 Third-Party Services

ImgBB: Uploaded images and exported pictures are stored on ImgBB's servers. They are publicly accessible via URL. ImgBB's privacy policy applies to these uploads: https://imgbb.com/privacy

Google Analytics: Analytics data is processed by Google. Google's privacy policy applies: https://policies.google.com/privacy

4.3 Security Measures

• HTTPS encryption for all connections
• Content Security Policy headers to prevent XSS attacks
• DOMPurify sanitization for user-generated HTML
• No server-side storage of creative content

5. Cookies and Tracking Technologies

Analytics is optional and remains off unless you actively allow it in the application.

6. Your Rights and Choices

Since we don't collect personal accounts or store your creative work on our servers, most data rights are inherently protected. However, you have the right to:

• Access: Request information about the limited analytics data described above
• Delete: Clear your browser's localStorage to remove all saved work
• Analytics choice: Refuse analytics before it loads or change your saved choice later from the Privacy control
• Export: Use our export features to download your work at any time

7. Children's Privacy

Our service does not knowingly collect personal information from children under 13. Since we don't require accounts and don't store creative content on our servers, children can use the tool safely under parental supervision.

If you believe a child under 13 has somehow provided personal information to us, please contact us immediately.

8. International Users

Our service is hosted globally and may be accessed from anywhere. If you are located outside the United States:

• Editable project data stays in this browser unless you deliberately use an upload or hosted-export feature
• If you consent, Google Analytics data is processed according to Google's international data transfer policies
• ImgBB image uploads may be stored on servers in various regions

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will:

• Update the "Last updated" date at the top
• Display a notice on the website for 30 days
• For major changes, we may show a dismissible banner explaining the updates

Your continued use of the service after changes take effect constitutes acceptance of the updated policy.

10. Third-Party Links

Our service may contain links to external websites (Ko-fi, WordFokus, WorldKonstruct, AO3, etc.). We are not responsible for the privacy practices of these external sites. Please review their privacy policies independently.

Separately from links we place, a scene you build may reference media hosted elsewhere, and a published work will make requests to those hosts on your readers' behalf. Section 2.2 describes this.

11. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under GDPR:

• Choice: We ask permission before loading Google Analytics in the application. Refusing does not affect the tool.
• Data Minimization: We collect only what's necessary for analytics and service functionality.
• Withdrawal: You can withdraw a previous analytics choice from the application's Privacy control.
• Data Portability: Use our export features to download your work in standard formats (CSS, HTML, PNG).

12. CCPA Compliance (California Users)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with rights regarding your personal information:

• Right to Know: You can request information about the limited analytics data described above.
• Right to Delete: Request deletion of analytics data associated with your browser.
• Right to Opt-Out of Sale: We do not sell personal information.
• Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

14. Data Breach Notification

In the unlikely event of a data breach involving personal information:

• We will notify affected users within 72 hours
• We will report the breach to relevant authorities as required by law
• We will take immediate steps to contain and remediate the breach

Note: Since we don't store creative content or require accounts, the risk of a meaningful data breach is extremely low.