Legal

Privacy Policy

Effective Date: September 22, 2026

1. Introduction

Your privacy is important to SugarCube Art ("us", "we", or "our"). This Privacy Policy explains how we collect, use, and protect your information when you use our AI-powered services at sugarcube.art (the "Service"). By using SugarCube Art, you agree to the practices described in this Privacy Policy.

2. Information We Do Not Sell or Use for Advertising

We limit collection to operating SugarCube and do not:

  • Sell personal information
  • Store full card numbers or card security codes
  • Use advertising cookies or cross-site behavioral tracking
  • Upload images used by the browser-only watermark remover
  • Share account or creation data with third parties for their marketing
  • Ask for more account information than needed to provide and secure the Service

3. Information We Process

Depending on the features you use, we process:

  • Account information — such as email, display name, profile image, authentication records and the IP address used to register an account
  • Creation information — source prompts, enhanced prompts, final submitted prompts, model and mode context, prompt-enhancement adoption outcome, references, generated results, task status and private history, saved creative-assistant conversations and proposals
  • Billing information — plan, credit balance, transaction status and Stripe customer or payment identifiers; Stripe handles payment credentials
  • Technical information — essential session cookies, security logs, error details and privacy-limited product analytics such as pages viewed, tools used and conversion outcomes. Daily reward abuse prevention uses a keyed IP digest that changes each day, rather than storing the raw IP in daily reward records, to limit abnormal claims across multiple accounts.

Google sign-in data

When you choose Sign in with Google, Google provides your account identifier, verified email address, display name and profile image. SugarCube stores these account details to sign you in, display your profile, secure your account, and associate your credits and private creation history with you. We request only basic sign-in information, not access to Gmail, Google Drive or contacts, and we do not receive your Google password.

This information is processed on the infrastructure that operates SugarCube. If you use billing, we send your account email, name and SugarCube account identifier to Stripe to create and identify your billing account. We do not sell Google account information or use it for advertising. The security, retention and deletion provisions below also apply to Google sign-in data; you can request deletion through support@sugarcube.art.

4. How We Use Information

We use this information to:

  • Generating images in response to your prompts
  • Operating and improving the Service's performance and quality, including product-content research, prompt-enhancement optimization and adoption analysis
  • Maintaining service security, limiting registration to one account per IP address, preventing abuse and measuring aggregate user-region distribution
  • Authenticate accounts, process payments, maintain credits and provide billing support

5. Data Retention

Account records, including an account's registration IP address, and creation and billing records are retained while needed to provide the Service, enforce registration limits, maintain your private history, measure aggregate regional distribution, resolve disputes and meet legal or accounting obligations. Raw source, enhanced and final submitted prompt text in prompt-enhancement records has an operational retention target of 180 days and is removed through periodic manual cleanup. You may request deletion of account, creation or prompt-enhancement data, where applicable, through support@sugarcube.art. Images processed by the browser-only watermark remover remain on your device. Saved creative-assistant conversations and proposals are retained with your account while needed to provide the Service and maintain your private creation history; you may request their deletion through support@sugarcube.art.

Guest trials use a separate essential cookie, renewed for up to 30 days when you return. Trial credits expire after 24 hours; paid credits follow the purchased offer. A keyed network digest prevents repeat free claims; guest records do not store a raw IP. Guest creations, credits and billing records are retained for history and payment integrity. Stripe collects payment details and a recovery email. We retain that email after confirmed payment; it does not sign you in. Verifying the checkout email through our existing sign-in restores purchases and history. Verified sign-in also transfers the current guest session; trial credits keep their original expiry.

6. Security Measures

We implement appropriate technical and organizational measures to protect against unauthorized access, alteration, or destruction of the limited data we process. Our Service operates exclusively on secure, encrypted HTTPS connections. However, no method of transmission over the Internet or electronic storage is 100% secure — we cannot guarantee absolute security.

7. Cookies & Similar Technologies

SugarCube uses essential cookies to keep you signed in and protect account actions. We use Google Analytics for aggregate product usage and conversion outcomes, and Microsoft Clarity for masked heatmaps and session recordings. These analytics tools load by default when you use the Service. Clarity recordings use strict page-content masking, and analytics events do not include names, email addresses, prompts, file names or image URLs. We do not use advertising cookies. Stripe may use its own technologies on hosted checkout and billing pages under Stripe's privacy policy.

8. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect or process information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such data.

9. Your Rights

Depending on your location and applicable law, you may have the following rights with respect to personal data we hold, including account, creation and prompt-enhancement records:

  • Access — request a copy of your data (where applicable)
  • Rectification — request correction of inaccurate data
  • Erasure — request deletion of your data
  • Portability — request your data in a portable format
  • Object — object to processing of your personal data

To exercise any of these rights, contact us at support@sugarcube.art.

10. International Data Transfers

SugarCube Art is operated from our servers. When you choose prompt enhancement, we send your source prompt and validated model and mode context to xAI’s Grok service to produce an enhanced prompt. When you use the creative assistant, we send your current request, recent conversation context, and the uploaded or previously generated images you select as references to the configured AI provider to prepare a plan. The default configuration uses Grok through Kie.ai. These providers may process information across borders. International transfers are handled with safeguards appropriate under applicable data protection laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any material changes will be posted on this page with an updated "Effective Date." We encourage you to review this Privacy Policy periodically.

12. Contact Information

If you have any questions or concerns about this Privacy Policy, please contact us: