Privacy Policy

1. Data controller

DeskSprite is a desktop pet application for Windows and macOS, together with the pet-shop website you are browsing. The data controller is the individual developer (sole proprietor) who develops and operates DeskSprite under the laws of China; in this policy, "DeskSprite", "we" and "us" refer to that developer and the application and website they operate.

• Privacy contact — [email protected] (all privacy requests).
• Data protection officer — not established. Given the scale of the service and the minimal data we process, no DPO is appointed; the privacy contact above handles every request directly.

2. Personal information we collect

We only list what we actually collect — nothing else.

2.1 Information you provide

• Account information — when you sign in with Google, we receive and store your Google email address, display name and profile picture, so your account can exist and be recognized. We never see your Google password, and we do not require a real name, phone number or address.
• Order and payment records — order number, product, amount, status and the payment-provider reference for purchases made on this website.
• AI customization submissions — the photos and text descriptions you upload to the AI customization feature, used solely to generate your custom pet.
• Feedback content — the message you submit through the Feedback page. Submissions may be anonymous; if you are signed in, we can see your account email.

2.2 Information collected automatically

• Operational logs — our hosting records technical request data (for example IP address, request time and requested URL) to keep the service secure and to troubleshoot failures. We do not use this data for advertising or profiling, and we do not run any analytics or tracking tools on this website.

The desktop application itself keeps your settings, animation assets and rules in a local configuration file on your computer. Your local pet configuration and media files are not uploaded to our servers. The application keeps its own diagnostic logs locally; they are only sent to us if you choose to share them with us (for example, when asking for support).

3. How we use personal information

Each purpose is paired with its legal basis under the GDPR (Art. 6):

• Creating and maintaining your account, and signing you in — performance of a contract (providing the service you signed up for).
• Processing orders, memberships and entitlements (purchased pets, membership status, AI customization quota), and handling refunds — performance of a contract.
• Generating the custom pet you requested — performance of a contract.
• Answering your feedback and support requests — performance of a contract / our legitimate interest in helping users.
• Protecting the service against fraud and abuse, and keeping operational logs — our legitimate interest in operating a secure service.
• Complying with legal obligations (for example accounting and tax rules) — compliance with a legal obligation.

We do not use your personal information for marketing, and we do not make automated decisions that produce legal effects concerning you.

4. Cookies and tracking

This website is a mostly static shop and documentation site. We run no analytics tools and no advertising or cross-site tracking. The only storage we use is strictly necessary: a signed-in session cookie/token that keeps you logged in (and, in the app, your own local settings). Strictly necessary storage cannot be switched off without losing sign-in; everything else simply does not exist on this site, so there is nothing to opt out of.

5. How we share and disclose personal information

We only share the minimum data necessary with these categories of providers:

• Payment processor — Waffo Pancake — payments and refunds are processed by Waffo Pancake. Card data is handled by their PCI-DSS-compliant checkout and is never stored on our servers; we only receive the payment result and a reference number.
• AI generation providers — your customization submissions are forwarded to third-party AI services to generate your custom pet: image generation uses the gpt-image-2 model accessed through API service providers, and video generation uses Seedance models via ByteDance's Volcano Engine. Depending on the active provider, a reference photo may be uploaded to a temporary image-hosting service to obtain the generation link. These providers process your submission only to perform the generation.
• Sign-in provider (Google) — Google authenticates you and gives us the account fields described in section 2.1, under Google's own privacy policy.
• Infrastructure providers — hosting and storage services that keep this website and its API running.

We may also disclose information where required by law, or to protect the rights and safety of our users and the service.

We do not sell your personal information — including under the broad definition of "sale" in the California Consumer Privacy Act (CCPA) — and we do not share it for cross-context behavioural advertising.

6. Security measures

We use encrypted connections (HTTPS) for all traffic between the app, this website and our servers; sign-in session tokens are stored only as irreversible hashes; and personal data is accessible only to the developer who operates the service. We keep the attack surface deliberately small — no third-party scripts, no tracking.

If a personal data breach ever affects your rights or freedoms, we will inform you and the competent authority without undue delay, aiming to notify within 72 hours of becoming aware of it (the GDPR reference point).

7. How long we keep personal information

• Account data — while your account is active; after an account deletion request, deleted within 90 days (backups roll off on the same schedule).
• Order and transaction records — up to 5 years, for accounting, tax and dispute-handling purposes.
• AI customization submissions — only as long as needed to generate and deliver your custom pet, then the source photos are deleted. The generated keyframes/videos are kept so your pet keeps working (they are part of your purchase).
• Operational logs — up to 90 days.
• Feedback — as long as needed to handle and follow up, normally no longer than 24 months.

8. Your rights

You have the following rights over your personal information:

• Access — see what we hold about you (much of it is always visible on the Account page).
• Correction — fix inaccurate data (email can be changed on the Account page).
• Deletion — request deletion of your account and personal data. This also removes your entitlements, so it cannot be undone.
• Restriction — ask us to pause processing while a dispute is open.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on our legitimate interests.
• Withdrawal of consent — where processing is based on consent, withdraw it at any time.
• Non-discrimination — exercising these rights never degrades your service.

9. Marketing communications

We do not send marketing emails or push notifications, and there is nothing to unsubscribe from. The only messages you may receive from us are transactional (payment results, support replies about your requests).

10. International data transfers

We are an independent developer, and our infrastructure and AI providers may process data in regions other than yours (for example the United States, Singapore or the European Union). Where personal data leaves the EEA or the UK, we rely on our providers' safeguards such as the EU Standard Contractual Clauses, and we only transfer the minimum data described in this policy.

11. Children's privacy

DeskSprite is not directed at children under 13 (the COPPA minimum age; where your local law sets a higher minimum age — for example 16 in parts of the EU — we respect that age). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it.

12. Third-party links and services

Payments happen on a checkout page hosted by our payment processor, and signing in happens on Google's pages — those steps are governed by the respective providers' own terms and privacy policies. This website does not embed third-party content otherwise.

13. Changes to this policy

We may update this policy as the service evolves. If a change materially reduces your rights, we will announce it on this page at least 15 days before it takes effect, with a new version number and effective date. Continued use of the service after a change takes effect means you accept the updated policy.

14. Contact us