1. Overview
This policy explains how Firesight Studios LLC ("we") handles personal information in the GRIT desktop app and our online Services (the website, accounts, the Library, game hosting, player services, Cloud projects and contests). We collect what we need to run those Services, we don't sell personal information, and we don't use advertising or third-party tracking.
2. What stays on your computer
The App runs on your computer. Unless you use a feature that sends something to us (listed in section 3), your projects, scenes, scripts and assets stay on your machine. In particular:
- AI provider API keys are stored encrypted on your computer and are never sent to us.
- Conversations with the AI assistant, and the files and context it reads, go directly from your computer to the AI provider you configured, under that provider's privacy policy. They don't pass through our servers.
- MCP servers, Blender, browsers and other tools you connect run on your computer or with the services you chose.
- The App keeps local settings, chat history, a file history for undo, and usage habits on your computer only.
3. What we collect
- Account: when you sign in with Google, your Google account ID, email address, name and profile picture. You can choose a public profile (handle, display name, bio, picture), which is shown with what you publish; your Google name, email and picture are never shown publicly.
- Age: you give your date of birth when you first use your account. We store only that you confirmed your age, when, and whether you were 18 or over, plus an entry in our security log; the date itself isn't stored. If you are under 13, the account is deleted.
- Devices and license: your license key, the App's device identifier for each device you activate, device tokens (stored only as hashes), when each was last used, and your App version.
- Purchases: your plan, subscription status and purchase history. Payment details are handled by Stripe; we receive a customer ID and the status of payments, not your card number. If a GRIT Pro payment is refunded or charged back, we keep a record of it with Stripe's fingerprint of the card (a code that identifies the card without revealing its number), to prevent repeat abuse.
- Content you send us: Cloud project snapshots (the files and their names and hashes), game builds, game pages, images and shared project source, community assets you share, comments, ratings and reports, contest entries and votes, and player saves and scores in published games.
- Library use: which assets you download (to apply your license and, for paid assets, to keep them licensed after Pro ends), and searches that found nothing (stored as the search words, and linked to you only to count distinct users; never shown).
- Bug reports and feedback you choose to send from the App, including any log or details you include.
- Technical data: IP address and request details in server logs, rate-limit counters, and a security audit log of actions such as sign-ins, publishing, purchases and deletions.
- Cookies: a session cookie that keeps you signed in on the website. We don't use advertising or analytics cookies.
Players of games published with GRIT: if you sign in to save progress or post scores, the game stores your save data and scores under your GRIT account, and your public name appears on leaderboards.
4. How we use it
- To provide the Services you ask for: sign-in and device activation, licensing and Pro, Library downloads, hosting and serving games, player saves and leaderboards, Cloud projects, contests and updates.
- To keep the Services secure: preventing abuse and fraud, enforcing limits and our policies, and investigating reports.
- To support you and fix problems, including from bug reports.
- To decide what to build next, from aggregate use such as Library searches that found nothing.
- To meet legal obligations, such as tax records and responding to valid legal requests.
Legal bases (where the GDPR or similar law applies): performing our contract with you; our legitimate interests in running, securing and improving the Services; your consent where we ask for it; and legal obligations.
5. Who else processes it
We share personal information only with providers that help us run the Services, under contracts that limit their use of it, and when the law requires:
- Google, for sign-in.
- Stripe, for payments, subscriptions, taxes and receipts.
- Our hosting and storage providers (for example DigitalOcean), where the website, database and stored files run.
- Law enforcement or others when required by law, or to protect people's safety or our rights.
- A buyer or successor if our business is sold or merged, under this policy.
What you make public is visible to everyone: public games and their pages, comments and ratings, your public profile, community assets you share (credited to you), contest entries and leaderboard names. Unlisted games can be played by anyone with the link. Shared Remix source is available to signed-in GRIT users.
6. How long we keep it
- Account data: while your account exists; deleted when you delete your account. A refunded or charged-back GRIT Pro payment's card fingerprint is kept after that, to prevent repeat abuse.
- Cloud projects: by your plan's history window (7 days free, 90 days Pro; the newest snapshot of each project is always kept), until you delete them or your account. Files no snapshot uses any more are deleted by our regular clean-up.
- Games you delete: up to 30 days, so a mistake can be undone, then deleted with their files.
- Player saves and scores: until the player or the game is deleted.
- Bug reports: until resolved and no longer needed, and deleted with your account.
- Audit and security logs: kept to protect the Services; when you delete your account, entries are kept without the link to you.
- Backups: copies may persist in database backups for a limited period before they are overwritten.
- Purchase records: as long as tax and accounting law requires.
7. Your choices and rights
You can see and change your profile, sign out devices, download your Cloud projects, delete snapshots, games and comments, turn off automatic snapshots, and delete your whole account, all from the App or your account page.
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict some uses, and to withdraw consent. To use these rights, email [email protected]; we may need to confirm it's you. We don't sell or share personal information for cross-context behavioral advertising, and we won't treat you differently for using your rights. You can also complain to your local data protection authority.
8. Security
We protect data in transit with encryption, store credentials only as hashes, store files content-addressed and checked by hash, sign Library downloads, and limit access to our systems. No system is perfectly secure; tell us at once if you find a problem.
9. Children
The Services are not directed to children under 13, and we don't knowingly collect their personal information. Every account confirms its owner's age before it can be used; an account whose owner says they are under 13 is deleted at once. If you believe a child under 13 has given us personal information, contact us and we will delete it. Game publishers are responsible for their own games' suitability for children.
10. International transfers
We are based in the United States and our servers may be in the United States or other countries. Where the law requires, we use appropriate safeguards (such as standard contractual clauses) for transfers.
11. Changes and contact
We will update this policy when what we collect or how we use it changes, show the new date here, and tell you in the App or by email for material changes.
Contact: [email protected]. Firesight Studios LLC, Chattanooga, Tennessee, United States.