Gensprite
Sign in

Privacy policy

Last updated: October 29, 2026

Who we are

Gensprite (gensprite.ai and api.gensprite.ai) is operated by Triangle Interactive, LLC (“we”, “us”). It generates game art and audio, and playable games built with GigaEngine, used through the web workshop and an HTTP API with API keys. Questions about this policy go to hello@gensprite.ai.

What we collect

  • GigaEngine wishlist: your email, request and confirmation times, and the version of your consent to GigaEngine updates and its launch announcement. Confirmation tokens are stored as hashes and expire after 48 hours. We use short-lived, keyed hashes of IP addresses to limit signup attempts. Confirmed addresses are added to a dedicated Resend list; you can unsubscribe in any update without creating an account.
  • Account: your name, email address, whether the email is verified, and an optional avatar image URL from your sign-in provider. There are no passwords — sign-in is by email magic link (valid for ten minutes, stored only as a hash) or by Google or GitHub OAuth, whose tokens we store to keep you signed in.
  • Sessions: each signed-in session records the IP address and browser it was started from.
  • Generations: every job keeps its input — the prompt you typed, the settings, the resolved seed, and references to input images — together with the files it produced. Job records are what your history and credit ledger are made of.
  • Games: the prompts you send a game and what each one cost, the progress the game page shows while the agent works, the project with its art, the agent’s working conversation (kept so the next prompt continues where the last one stopped), and the game’s builds and screenshots. Builds and screenshots are served from unlisted public URLs so that a browser can load them: anyone who has such a link can open that build. A game is public unless its owner makes it private, which accounts that have bought credits can do: a public game’s title, the prompt it was first made from, its newest build and a screenshot are shown to anybody on its page and in the games gallery, never with your name or email.
  • Uploads: images you upload for rotation or animation (PNG, JPEG or WebP, up to 20 MB), and files you keep in a project for its games (images, GIFs, WAV, OGG or MP3 sound, and GLB models, up to 100 MB).
  • API keys: stored as hashes with the first eight characters kept for display, plus a last-used timestamp, any spend limit you set, and the credits the key has spent. The secret itself is shown to you once and never stored.
  • Billing: payments are handled by Stripe. We store only what is needed to grant what you bought — Stripe’s event ids and your subscription state. Card numbers never touch our servers.

Cookies, analytics and referral links

Session cookies keep you signed in. Your theme choice is kept in your browser’s local storage, and documentation search runs on our own server. We run no tracking pixels, and our only advertising script, the Google Ads tag, loads only for visitors who come from one of our ads on Google (below).

We do run product analytics, with PostHog, to see how Gensprite is used and where it breaks:

  • The website records page views, clicks, errors and page performance, and events such as opening a purchase offer, starting a game or downloading a file. PostHog keeps an identifier for your browser in a cookie and in local storage; once you sign in, these events are linked to your account and its email address.
  • Visits to the website may be recorded for replay: what the pages showed and where you clicked, with everything typed into fields masked, along with console messages and the timing of network requests. Recordings are kept for 30 days.
  • Our servers send events about signups, generations, games, purchases, downloads and server errors, linked to your account. They describe what was made and what it cost, and leave out the text of prompts, apart from the motion an animation was asked for.
  • PostHog records the IP address each event came from, and the approximate location it implies.
  • The GigaEngine wishlist’s email confirmation page sends nothing to analytics.

Website events reach PostHog through our own domain. We do not use analytics data for advertising.

When you arrive by clicking one of our ads on Google, the website loads the Google Ads tag, and keeps loading it in that browser for 90 days. Google sets its own cookies to recognise the click and receives the pages you load. If you buy credits, a plan or the Game pack in that time, the tag tells Google a purchase was made, with its amount and the id of the Stripe checkout, so we can see which ads lead to purchases. It sends no name, email address or account id. Visitors who did not come from a Google ad never load it.

When the partner program is enabled, opening a creator’s referral link records its campaign and opening time. A random identifier kept in your browser for 30 days helps estimate unique browsers. The referral analytics database stores a hash scoped to that creator, not your IP address or a device fingerprint. Clearing browser storage or switching devices can increase the count.

Choosing to accept a referral saves a separate first-party cookie for 30 days. It can connect a new account and eligible purchases to the creator for commission accounting. Creators see aggregate traffic and pseudonymous referral records; administrators can manage the underlying accounts and agreements. You can continue without accepting the referral.

Who else sees data, and why

Gensprite runs on a small set of processors, each receiving only what its job requires:

  • Stripe — payments. Receives your email address and our internal account id.
  • fal.ai — runs the generation models. Receives your prompts and, for rotations and animations, the images being worked on. While a job runs, input images are reachable at unlisted public URLs so the models can read them.
  • Meshy — makes 3D props, 3D characters and their motion. Receives the prompt or image a 3D job starts from, and the motion you describe.
  • Tripo — makes 3D props: those made with the Tripo model, and those Meshy cannot make at the time. Receives the prompt a prop starts from.
  • Anthropic — runs the model behind the game agent. Receives your game prompts and what the agent reads while it works: the project’s files and screenshots of the game.
  • Daytona — runs the sandbox each game prompt is made in. It holds the prompt, the game’s project and its art, and the characters and files of a project the game was made from, while the prompt runs; the sandbox is deleted when it ends.
  • Cloudflare — R2 stores uploads, generated files and games; your browser uploads directly to it using links that expire after fifteen minutes. A Cloudflare Worker relays the game agent’s model calls to Anthropic and counts what they cost.
  • Resend — sends all email (sign-in links, balance warnings, announcements) and hosts the mailing list, including the record of whether you have opted out. Receives your email address and first name.
  • PostHog — product analytics and session recordings, hosted in the United States. Receives the events and recordings described above, with your account id and email address.
  • Google — Google Ads, only for visitors who come from one of our ads on Google. Receives what is described above, under Google’s own privacy policy.
  • Vercel — hosts the website and API.

We do not sell personal data, and we do not use your prompts, uploads or generated art to train models.

Email

Sign-in links and account notices are transactional and arrive as long as you have an account. New accounts are also subscribed to product announcements; every such message carries a one-click unsubscribe, and the same switch lives in Settings and at gensprite.ai/unsubscribe, which works without signing in. Opting out sticks.

How long things stay

  • Generated files are kept while your account has spendable credits or an active plan. When both lapse, a 90-day countdown starts — announced in the workshop with the exact date — after which the files are deleted. Topping up before then stops the clock.
  • Job records (prompts, settings, the credit ledger) survive file expiry, because they are the account’s history of what was charged and refunded.
  • Games are not on that countdown: they stay with your account. If we ever set a limit on how long they are kept, we will announce it by email before anything is deleted.
  • Uploads nothing references are deleted after 24 hours. Working files of failed jobs are discarded immediately.
  • Magic-link tokens expire after ten minutes.

Security

Sign-in tokens and API keys are stored hashed, never verbatim; uploads travel over short-lived signed URLs; payment webhooks are verified by signature; cookies are marked Secure in production. No measure makes a system impenetrable, but secrets we never store are secrets that cannot leak from us.

Your rights

You can ask us to access, correct, export or delete the personal data we hold about you by writing to hello@gensprite.ai from your account’s email address. Deletion removes the account and everything attached to it, including remaining credits. We answer within 30 days.

Children

Gensprite is not intended for children under 13, and we do not knowingly collect personal information from them.

Changes

When this policy changes, the date at the top changes with it, and material changes are announced by email. Continued use after a change means acceptance of it.