Privacy Policy

1. The Short Version

Confirm Concept LLC operates Generative Cats at generativecats.app. Our posture, stated plainly so you can hold us to it: we record as little as necessary for the platform to function.

• We know your email address. That is the only thing we know about you as a person.
• We set no cookies — the one exception is Google's anti-bot script, which sets its own under Google's domains. That is why there is no consent banner.
• We store no passwords — Google handles sign-in.
• We never see your payment details.
• Your prompts reach AI providers without your identity attached.
• We do not sell, rent, or trade any of it.

2. What Connects You to Your Account

There is exactly one thread between you-the-person and you-the-star: your email address, stored on your account record and held by Firebase Authentication so you can sign back in.

Everything else about you on this platform is generated, not given. Your star name is derived from what you create. Your bio is written by a model from your creations. Your profile picture is a crop of one of your own cats — the platform never accepts an uploaded photo, so there is no path by which your face could end up here. Nothing you make carries your name, because we do not have your name.

That single-thread design is what makes deletion meaningful: cut the thread and the connection is gone for good, including for us. See Your Data & Deletion.

3. What We Record, and Why

Account

You sign in with Google. Google performs the authentication and we receive only your email address — we do not read or store the display name or profile photo Google offers. We create or store no passwords. We do not ask for your real name, phone number, postal address, date of birth, or any government identifier, and there is nowhere in the product to supply them.

Creations

We store the prompts you submit and everything generated from them: images, names, traits, and lore. This content is public within the platform and permanent — see the Terms, sections 7 and 8. It is attributed to your star, which is not your name.

Activity

Counts we need in order to run the mechanics: generations used, reactions given and received, remixes, merges, streaks, and subscription state. These enforce quotas and drive the prestige system. They are counters on your account record, not a behavioral profile.

Support submissions

If you send feedback, we store what you wrote, the category you chose, the page you were on, your browser's user-agent string and window size (so we can reproduce bugs), your account ID, and — only if you choose to supply it — a reply-to email address. Submissions are passed through Gemini to classify sentiment, theme, and priority, and to draft the acknowledgment you see. Do not put personal information in a support message either.

Waitlist

If you join the waitlist we store your email address plus how you arrived — the signup source, the referring URL, and any UTM parameters on the link you followed — so we know which channels actually work. Every email we send from that list carries an unsubscribe link, and unsubscribing removes you from the list.

4. IP Addresses

We process your IP address for one purpose: rate limiting, so a script cannot flood signups, the waitlist, or the generation queue. It is stored in a rate-limit counter, it is never attached to your account or your creations, and a scheduled job deletes those records within 48 hours. We do not use IP addresses for analytics, profiling, or geolocation targeting.

5. Prompts and AI Providers

Images are generated by OpenAI's gpt-image-2, with Google's Gemini 3.1 image models on Vertex AI as a standby fallback. Text — names, traits, lore, bios — is generated by Gemini 2.5 Flash on Vertex AI.

Providers never learn who you are. A request to OpenAI carries the model, the prompt, the image size, and the quality setting — nothing else. Vertex AI requests are authenticated as our service account, so Google sees the platform, not the person. There is no user ID, email, or session identifier in either call.

Your prompt text is sent to the provider exactly as you type it, so do not include personal information in a prompt. Once it arrives, retention is governed by that provider's API terms rather than by us. OpenAI states that data submitted through its API is not used to train its models by default.

6. Analytics and Error Monitoring

Analytics. We use PostHog to see which pages and features get used. It is configured to store nothing on your device — no cookie, no local storage — so there is no cross-visit identifier following you around. It honors your browser's Do Not Track setting: if you have DNT on, we capture nothing. Session recording is disabled outright; we never watch a replay of your screen. PostHog is the only analytics tool on the platform — there is no Google Analytics, no advertising pixel, and no third-party tracker.

Errors. When something breaks, Sentry receives the technical context and your account ID so we can tell whether one person hit a bug or a thousand did. Your email address is not attached to error reports.

Details of what is and is not stored on your device are on the Cookies & Local Storage page.

7. Payments

Polar.sh is our Merchant of Record. Polar holds all payment data, runs the checkout, handles tax and invoicing, and processes refunds. Card numbers, billing addresses, and tax identifiers never reach our systems. What we store on your account is two opaque identifiers — a Polar customer ID and a Polar subscription ID — which let us tell whether your subscription is active. Manage or cancel through Polar's billing portal at any time.

8. Who Else Touches Your Data

The complete list. Each operates under its own privacy policy, and none of them receive data for advertising purposes.

We do not sell, rent, or trade personal data, and we do not share it with anyone outside this table except where the law requires it.

9. Where Your Data Lives

Your data is stored on Google Cloud infrastructure in the United States and transmitted over HTTPS. Firestore security rules restrict access, and every sensitive write goes through server-side code rather than the browser. Because we use Google sign-in exclusively, there are no passwords on our side to lose.

If you are outside the United States, using the Service transfers your data to the United States. Where that transfer is from the UK, the EEA, or Switzerland, it is made under the European Commission's Standard Contractual Clauses as incorporated into our processors' data-processing terms.

10. Retention and Deletion

Account data is retained while your account exists. Rate-limit records holding IP addresses are deleted within 48 hours. Creations are permanent by design and are removed only when the law requires it — the single carve-out described in Terms section 8.

You can ask us to delete your account at any time by writing to privacy@generativecats.app. Deletion is permanent: your creations remain in the cosmos forever, unattributed, and if you return you begin as a new star. We fulfil deletion and access requests within 30 days. The full account of what is erased, what survives, and what it means that we cannot reverse it is on Your Data & Deletion.

11. Your Rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it, or ask for it in a portable format — and, depending on where you live, object to or restrict certain processing. Write to privacy@generativecats.app; we respond within 30 days. How to exercise each right.

12. Children

Generative Cats is not directed at children under 13 and we do not knowingly collect information from them. If you believe a child under 13 has an account, write to privacy@generativecats.app and we will delete it.

13. Changes to This Policy

We update this page whenever what we record changes, and the “Last updated” date at the top moves with it. Continued use after a change constitutes acceptance.

14. Contact

Privacy questions and data requests: privacy@generativecats.app. Everything else starts at the support hub.

Generative Cats
A product of Confirm Concept LLC