Privacy Policy

1. Who we are

AnimatedWebs is operated by Like a King Inc. (“we”, “us”), which is the controller of the data described here. Like a King Inc. also runs other brands, including MotionVault (motionvault.site), RegesCore, Reges Code and CreditFixExpert. Each brand has its own accounts and privacy notice. We do not share AnimatedWebs data with those brands for their marketing. Shared internal systems (for example hosting or support tools) are used only to run AnimatedWebs. If your membership was bought through MotionVault and includes AnimatedWebs content, the two sites share your email address, membership status and the related Stripe billing records so the membership works on both and you are not charged twice.

2. What we collect

• Account data: email address, and a hashed password or sign-in link data, stored in our self-hosted authentication database.
• Profile data you choose to add: display name, role, company, website and whether you opted in to the newsletter.
• Library data: templates you save or unlock, Prompt Pack credits, and API key metadata (key identifier, creation and last use) for the MCP server and Pro API.
• Pro API and MCP request logs: account, key identifier, endpoint or tool, time, status and usage counts, used for rate limits, billing, security and abuse prevention.
• Brand Studio data: the briefs, brand names and settings you enter, the designs you make (kept in your browser; we keep a copy when you create a share link, a brand presentation or a download), AI images (kept on our servers for about 2 hours), share links and brand presentations you create, and download, allowance and purchase records.
• Consent records: the version of the Terms of Service or program terms you accepted, the time and how you accepted (for example the checkout consent Stripe records, including your choice about immediate access).
• Billing data: plan, subscription status and a Stripe customer ID. Card details are handled by Stripe and never reach our servers.
• Creator Program data: handle, name, headline, bio, links (website, GitHub, X), country, stack, portfolio text, sample demo and repository links, confirmation that you are 18+, the terms version you accepted, your ownership-verification token and result, badges, tier and certificate details.
• Affiliate and payout data: your referral code, the referrals and commissions credited to you and, when you request a payout, payout and tax details (for example an IRS W-9 or W-8BEN form with your taxpayer ID). Payout and tax details are collected by our payment provider or through a secure form. They are never public.
• Referral data: if you arrive through a referral link, the referral code is stored in a first-party cookie (see the Cookie Policy) and attached to your purchase.
• Messages: what you send through the contact form, including your email address.
• AI tools and MCP: when you connect AnimatedWebs to Claude or another AI tool, we receive only the requests it sends to our tools (search terms, filters, template and component ids, and descriptions you ask us to generate from). We don't store your search terms, and we never receive your conversation, files or other chats.
• AI generation (UI generator, AnimatedWebs Design, Brand Studio and MCP): the text and images you send are processed by our AI model providers to produce the result: free hosted open models through OpenRouter (and the model hosts it routes to) and Groq; for Brand Studio text, also Anthropic, OpenAI, Google (Gemini), xAI and OpenCode Zen; for Brand Studio images, Hugging Face, OpenAI and Google (Gemini). We keep the first 1,200 characters of the description you give the UI generator or the Design Studio generator and a usage count for your daily limits; for AnimatedWebs Design workspace AI we keep only your account ID, the model and the time, and your designs stay in your private workspace. The AI Terms keep the current provider list.
• Your own AI provider key (Design): if you add your own Anthropic, OpenAI, xAI or OpenRouter key in the Design workspace, we store it only to make the requests you ask for, and those requests go to that provider under your account with it.
• Analytics: our self-hosted Umami, which sets no cookies, keeps event-level records (pages viewed, events, the referring site, city-level location derived from your IP address, and device, browser and screen details) tied to an anonymous visitor ID that rotates and is never linked to your account. No cross-site tracking.
• Click, scroll and outbound-link analytics: on our public pages, a small script of our own records where on a page people click (as a position relative to the page or screen), the page element clicked (its position in the page structure), which link or button was clicked (its short text label and the link's address without its query string), the page's height, how far down the page people scroll, repeated “rage” clicks, links that lead to other sites, and a rough screen-size group. These events go only to our self-hosted Umami, not to any third party, and are tied to an anonymous visit, not to your account. We never record keystrokes, what you type, form fields or their contents, passwords, email addresses, or anything inside text boxes or areas we mark private, and the script does not run in your account dashboard. If your browser sends Do Not Track or Global Privacy Control, the script records nothing.
• Server logs: IP address, user agent and timestamps, kept briefly for security and debugging.

We don't collect sensitive categories such as health or biometric data, and we don't buy data about you from others.

3. Public information

If you become a verified creator, your profile page (animatedwebs.com/your-handle), certificate and published templates are public, as is the verification API that confirms a certificate number. This covers your handle, display name, headline, bio, links, stack, badges, tier and certificate number. Your email, country, tax and payout details and verification token are never public.

4. How we use it

• To provide the service: sign-in, your plan and unlocks, your library, payments, and the MCP server. (Contract)
• To run the Creator and Affiliate programs: reviewing applications, verifying ownership, publishing profiles, crediting referrals and paying earnings. (Contract)
• To meet legal duties: tax reporting (for example IRS Forms 1099), sanctions screening, accounting, and answering lawful requests. (Legal obligation)
• To secure the service, prevent fraud and abuse and enforce our terms. (Legitimate interests)
• To send essential emails (sign-in, receipts, renewal notices, important changes). Newsletters only if you opt in, and you can unsubscribe from each one. (Consent)

5. Who processes it

• The application, database, authentication and analytics are self-hosted on servers we run at Hetzner (Germany/Finland).
• Stripe processes payments and may act as an independent controller for payment and fraud data.
• Our payout provider processes payout, identity and tax details when you request a payout.
• Our email provider delivers sign-in and service emails.
• AI model providers (OpenRouter and the hosts it routes to, Groq, Anthropic, OpenAI, Google, xAI, OpenCode Zen and Hugging Face) process the prompts and images you send to AI features. Hosts of free models routed through OpenRouter have their own data practices, and some may log inputs; do not put sensitive personal data in prompts.
• We disclose data when the law requires it, to protect rights and safety, or as part of a merger or sale of the business, where the buyer keeps these commitments.

We don't sell personal information, share it for cross-context behavioral advertising, or use it for automated decisions with legal effects.

No training by us: we do not use your content, prompts or AI output to train AI models without your separate opt-in consent. AI providers process requests under their own terms and policies, as the AI Terms explain.

6. International transfers

We are based in the United States and our servers are in the EU. When data moves between countries, we rely on the protections required by law, such as the European Commission's Standard Contractual Clauses with the providers that offer them.

7. Retention

• Account and profile data: while your account is active, and deleted within 30 days of a deletion request.
• Creator profiles: removed from public view within 7 days of leaving the program.
• Transaction, commission, payout and tax records: 7 years, as tax and accounting law requires.
• Contact messages: up to 2 years. Server logs: up to 30 days.
• Brand Studio AI images: about 2 hours on our servers.
• Consent records: while your account is open and for 3 years after, to show what was agreed.

8. Security

We use reasonable administrative, technical and physical safeguards, as New York's SHIELD Act and similar laws require. These include encrypted connections, hashed passwords, row-level access controls, restricted admin access and payment data kept at Stripe. If a breach affects your personal information, we will notify you and regulators as the law requires.

9. Your rights

Depending on where you live, you may have the right to:

• Know what personal information we hold, and get a copy in a portable format.
• Correct inaccurate information. You can edit most of it yourself on your dashboard.
• Delete your information, subject to records we must keep by law.
• Opt out of the sale or sharing of personal information and of targeted advertising. We do neither, so there is nothing to opt out of, but you may still ask.
• Withdraw consent (for example to the newsletter) and object to processing.
• Not be treated differently for using any of these rights.

These rights come from laws such as the GDPR and UK GDPR, the California Consumer Privacy Act (as amended by the CPRA), and the privacy laws of Virginia, Colorado, Connecticut, Utah, Texas, Oregon and other US states. To make a request, use our contact form from your account email. We may need to verify your identity. An authorized agent may act for you with your signed permission. We reply within 30 days (45 days where US state law allows, extendable once when needed).

Appeals: if we decline a request, you can appeal by replying to our decision within 60 days. We will respond within 60 days. If you're still unhappy, you can contact your state Attorney General or, in the EU/UK, your data protection authority.

10. Do Not Track and Global Privacy Control

We honor Global Privacy Control (GPC) and Do Not Track (DNT) signals. When your browser sends either one, we do not set the referral cookie and our click and scroll analytics record nothing. Our analytics use no cookies and no cross-site tracking in any case. This is how we respond to DNT signals, as the California Online Privacy Protection Act requires us to disclose.

11. Children

AnimatedWebs is not directed to children under 13, and we don't knowingly collect their data. Our Terms require account holders and buyers to be at least 18, or the age of majority where they live. The Creator and Affiliate programs are for adults 18+. If you believe a child has given us data, contact us and we'll delete it.

12. Notice at Collection for California residents

We collect the categories of personal information in section 2 (identifiers such as email and account ID, commercial information such as plans and purchases, internet activity such as server logs and usage counts, and the content you submit to AI features) for the purposes in section 4, and keep each category for the periods in section 7. We do not sell personal information or share it for cross-context behavioral advertising, and we do not use sensitive personal information to infer characteristics about you. Section 9 explains your rights and how to use them.

13. Changes

If we make material changes, we'll update the date above and, where appropriate, tell you by email or on the site before they take effect.

14. Contact

Like a King Inc., New York, USA: privacy contact form. See also our Cookie Policy, Terms of Service, AI Terms, Creator Terms and Affiliate Terms.