Privacy Policy
Last updated 19 August 2026
The short version: we collect your email, the prompts you write, the games we build for you, and basic usage analytics. We don't sell your data. We never see your card number.
What we collect
- Your account: email address and a password stored only as a salted hash.
- What you create: the prompts you write, any reference images you attach, and the games generated from them.
- Usage analytics: pages visited, builds started and finished, and errors — via PostHog and, if you arrived from an ad, Meta's advertising tools.
- Payments: handled entirely by Stripe. We store only a customer reference and your sand balance. Card numbers never touch our servers.
How we use it
- To build and store your games, and to keep your sand balance accurate.
- To fix what breaks — game errors are reported back to us so a broken game can be repaired.
- To understand which parts of the product work, and to measure whether our advertising reaches people who enjoy it.
Who else sees it
To generate a game, your prompt (and any reference image) is sent to the AI model provider that builds it — currently Anthropic, OpenAI, xAI, OpenRouter, or Venice, depending on the model used. Payments go through Stripe. Analytics go to PostHog. Advertising measurement, if you came from an ad, goes to Meta. We do not sell personal information to anyone.
Your games
Games you build are private to your account by default. We may feature a game publicly only if you ask us to, or if it was built on a demonstration account we own.
Your choices
Write to [email protected] to get a copy of your data, correct it, or delete your account and everything in it. We'll action deletion requests within 30 days. You can block cookies in your browser; the site works, but staying signed in requires our session cookie.
Children
Sandcastles is intended for adults. Accounts are for people 18 and over — a parent or guardian should hold the account and supervise children using it. We do not knowingly collect personal information from children under 13; if you believe we have, contact us and we will delete it.
Keeping it safe
Traffic is encrypted in transit. Passwords are hashed. Access to production is limited to the company's operators. No system is perfect, and we'll tell affected users promptly if something goes wrong.
Changes
If this policy changes materially we'll update the date above and notify account holders by email.