Privacy Policy

1. Introduction

Welcome to AO3 Skin Generator ("we," "our," or "us"). We are committed to protecting your privacy and being transparent about how we handle your data.

This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data when you use our website and services at ao3skingen.wordfokus.com.

2. Information We Collect

2.1 Information You Provide Directly

Creative Content: All text, styling, and configurations you create in the generator are stored locally in your browser using localStorage. We never transmit this data to our servers.

Images You Upload: If you choose to upload avatar images or attachments, these are sent to Cloudinary (a third-party image hosting service) using their unsigned upload feature. We do not store these images on our servers.

2.2 Information Collected Automatically

Analytics Data: We use Google Analytics to understand how visitors interact with our service. This includes:

• Pages visited and features used
• Time spent on the site
• Browser type and version
• Device type (desktop, mobile, tablet)
• Geographic location (country/city level, not precise)
• Referral source (how you found us)

This data is collected anonymously and aggregated. We cannot identify individual users from this data.

2.3 Information We Do NOT Collect

• We do not require accounts, so we don't collect names, emails, or passwords
• We do not store your generated skins, CSS, or HTML on our servers
• We do not track you across other websites
• We do not sell your data to third parties

3. How We Use Your Information

We use the limited information we collect to:

• Improve the service: Analytics help us understand which features are popular and where users encounter issues
• Fix bugs: Error tracking helps us identify and resolve technical problems
• Provide the service: Image uploads via Cloudinary enable avatar and attachment functionality
• Make strategic decisions: Usage patterns inform which features to build next

4. Data Storage and Security

4.1 Local Storage

Your creative work is stored in your browser's localStorage. This means:

• Data stays on your device
• We cannot access it
• Clearing your browser data will delete your saved work
• Different browsers/devices have separate storage

4.2 Third-Party Services

Cloudinary: Uploaded images are stored on Cloudinary's servers. They are publicly accessible via URL. Cloudinary's privacy policy applies to these uploads: https://cloudinary.com/privacy

Google Analytics: Analytics data is processed by Google. Google's privacy policy applies: https://policies.google.com/privacy

4.3 Security Measures

• HTTPS encryption for all connections
• Content Security Policy headers to prevent XSS attacks
• DOMPurify sanitization for user-generated HTML
• No server-side storage of creative content

5. Cookies and Tracking Technologies

We use minimal cookies and tracking technologies:

6. Your Rights and Choices

Since we don't collect personal accounts or store your creative work on our servers, most data rights are inherently protected. However, you have the right to:

• Access: Request information about what analytics data we've collected (though it's aggregated and anonymous)
• Delete: Clear your browser's localStorage to remove all saved work
• Opt-out: Disable Google Analytics using browser extensions or settings
• Export: Use our export features to download your work at any time

7. Children's Privacy

Our service does not knowingly collect personal information from children under 13. Since we don't require accounts and don't store creative content on our servers, children can use the tool safely under parental supervision.

If you believe a child under 13 has somehow provided personal information to us, please contact us immediately.

8. International Users

Our service is hosted globally and may be accessed from anywhere. If you are located outside the United States:

• Your locally-stored data never leaves your device
• Google Analytics data is processed according to Google's international data transfer policies
• Cloudinary image uploads may be stored on servers in various regions

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will:

• Update the "Last updated" date at the top
• Display a notice on the website for 30 days
• For major changes, we may show a dismissible banner explaining the updates

Your continued use of the service after changes take effect constitutes acceptance of the updated policy.

10. Third-Party Links

Our service may contain links to external websites (Ko-fi, WordFokus, AO3, etc.). We are not responsible for the privacy practices of these external sites. Please review their privacy policies independently.

11. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under GDPR:

• Legal Basis: We process analytics data based on legitimate interest (improving our service). You can opt out at any time.
• Data Minimization: We collect only what's necessary for analytics and service functionality.
• Right to Object: You can object to analytics tracking by using opt-out tools mentioned above.
• Data Portability: Use our export features to download your work in standard formats (CSS, HTML, PNG).

12. CCPA Compliance (California Users)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with rights regarding your personal information:

• Right to Know: You can request what personal information we collect (only anonymous analytics data).
• Right to Delete: Request deletion of analytics data associated with your browser.
• Right to Opt-Out of Sale: We do not sell personal information.
• Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

14. Data Breach Notification

In the unlikely event of a data breach involving personal information:

• We will notify affected users within 72 hours
• We will report the breach to relevant authorities as required by law
• We will take immediate steps to contain and remediate the breach

Note: Since we don't store creative content or require accounts, the risk of a meaningful data breach is extremely low.