Privacy Policy

This policy explains how 5e Maker handles data when you visit 5emaker.com, generate tabletop content, sign in, or buy a plan. Questions and privacy requests can be sent to privacy@5emaker.com.

1. Data We Handle

• Account data: email, name, and profile image supplied through Google sign-in.
• Generation data: your prompt, tool type, generated result, model used, status, timestamps, and estimated or provider-reported cost.
• Usage data: daily or monthly counters used to enforce plan limits.
• Product event data: page path, landing path, referring hostname, supplied UTM campaign fields, tool and plan category, generation outcome, save/export actions, and timestamps used to understand whether the service works. A random browser-session value is stored in session storage and written to our database only as a one-way hash.
• Payment data: plan, amount, currency, status, and PayPal order or subscription identifiers. We do not receive or store full card details or PayPal credentials.
• Security data: a one-way, date-scoped hash derived from the request IP for free-tier limits and abuse prevention. The application database does not store the raw IP in generation records.

2. Why We Use It

We use this data to provide requested generations, authenticate accounts, enforce limits, deliver paid access, process and reconcile payments, respond to support requests, prevent abuse, diagnose failures, and measure the path from a visit to a useful saved result and payment. Product events do not contain prompts, full referrer URLs, raw IP addresses, email addresses, or PayPal identifiers. We do not sell personal information.

3. Service Providers

• Cloudflare hosts the application and database and may process network and security logs.
• OpenRouter and the model provider selected for a request process prompts to produce results. Do not include confidential or sensitive personal information in prompts.
• Google provides optional account sign-in.
• PayPal processes purchases and subscriptions.
• Plausible may provide aggregate, cookieless traffic measurement when configured.

Google Analytics and Microsoft Clarity are not currently loaded by the site. Search-console and site-verification services do not receive prompt contents from us.

4. Cookies

We use essential cookies for sign-in and OAuth security. Current site analytics are cookieless. A random value in session storage links actions within one browser tab session; it expires when that browser session ends and is not used for cross-site tracking. See the Cookie Policy for the current list.

5. Storage and Retention

Account, generation, usage, product-event, and payment metadata are stored in Cloudflare D1. Generated outputs are not currently stored in a separate personal library or R2 bucket. We retain records while needed to operate the service, support the account, prevent abuse, resolve disputes, and meet accounting or legal obligations. We do not claim an automatic 30-day prompt-deletion schedule that the product does not currently implement.

When an account deletion request is completed, generation records are removed from normal product access, account links are removed from product-event records, and the account is scheduled for deletion. Limited payment and transaction records may be retained where reasonably required for accounting, fraud prevention, disputes, or law.

6. Your Choices and Rights

• Open Account & Usage to download a machine-readable copy of data linked to your account.
• Email privacy@5emaker.com to request access, correction, deletion, restriction, or objection.
• Cancel a PayPal subscription to stop future renewals. Cancellation does not remove access already paid for through the current period.
• You may complain to your local data-protection authority where applicable.

We may ask you to verify account ownership before acting on a request.

7. Children

The service is not directed to children under 13. If you believe a child has submitted personal data, contact privacy@5emaker.com so we can investigate and remove it.

8. Security and International Processing

We use transport encryption, restricted service credentials, and Cloudflare security controls. No online service can guarantee absolute security. Providers may process data in countries other than yours under their own legal and contractual safeguards.

9. Changes

We will update the date above when this policy changes. If a change materially affects paid users or how account data is used, we will provide a reasonable notice through the site or account contact information when practicable.