Privacy Policy

1. Information We Collect

When you create a Burndecks account we collect your email address and, if you sign in with Google, your name and profile photo. When you build decks we store the content you provide (text, uploaded images, brand-kit assets) and metadata about your usage (turns, image generations, timestamps).

2. How We Use Your Data

We use your data to:

• Provide, maintain, and improve the Burndecks service.
• Process AI deck generation and image creation requests via Anthropic and Replicate.
• Process payments and enforce plan limits via Stripe.
• Send transactional emails (account confirmations, share-link notifications).
• Analyze aggregate, anonymized usage patterns to improve the product.

3. AI Processing

Deck content you submit is sent to Anthropic (Claude) for AI generation and editing, and to Replicate for image generation. These providers process your data under their respective privacy policies and data processing agreements. We do not use your deck content to train AI models.

4. Third-Party Services

Burndecks uses Supabase (database & auth), Stripe (payments), Vercel (hosting), Anthropic (AI generation), Replicate (image generation), Postmark (email), Google Analytics, and Meta (advertising measurement — see §8). Each service processes data under its own privacy policy.

5. Data Retention

We retain your account data and deck content for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Anonymized aggregate metrics may be retained indefinitely.

6. Your Rights

You can export your decks, update your account information, or delete your account at any time from the Settings page. To request a full data export or deletion, email hi@burndecks.com.

7. Cookies & Tracking

We use three categories of cookies and similar technologies:

• Essential. Required for authentication, session management, and CSRF protection. You cannot opt out of these without losing access to the product.
• Analytics. Google Analytics cookies that report anonymized, aggregated usage statistics (page views, deck creations, feature adoption).
• Advertising measurement. Meta Pixel and Meta Conversions API (CAPI), used to measure the effectiveness of our advertising on Facebook and Instagram. See §8 for details.

8. Meta Pixel & Conversions API

When you visit Burndecks we load the Meta (Facebook) Pixel, which records that you viewed a page and which page you viewed. When you complete a meaningful action — signing up, finishing onboarding, starting checkout, or subscribing — we send a corresponding conversion event to Meta both from your browser and, for subscription events, from our server via the Meta Conversions API. This allows Meta to attribute conversions back to ad impressions you may have seen.

Personal data we share with Meta is hashed (SHA-256) before transmission and limited to: email address, name (when available), city / state / postal code / country (when provided to Stripe), your IP address, and an opaque tenant identifier. Meta cannot reverse the hashes; they only match against their own hashed copies of the same fields for users with Facebook / Instagram accounts. We do not share deck content, uploaded files, or AI-generated material with Meta.

How to opt out:

• We automatically honor Global Privacy Control (globalprivacycontrol.org) — enable it in Firefox, Brave, DuckDuckGo, or via the GPC browser extension and we will not load the pixel or send conversion events about you.
• Manage Meta's use of your data on Facebook's ad preferences page.
• Use a browser-level tracker blocker (uBlock Origin, Privacy Badger, Brave Shields) to prevent the pixel from loading.

9. Changes

We may update this policy from time to time. Material changes will be communicated via email or an in-app notice. Continued use after changes constitutes acceptance.

10. Contact

Questions? Email us at hi@burndecks.com.