Legal

Privacy Policy

Last updated: September 3, 2026 · Area12 Studios (area12.lol / app.area12.lol)

This Policy explains what we collect, how we use it, and your choices when you use Area12 Studios.

1. Who we are

Area12 Studios operates area12.lol (marketing) and app.area12.lol (dashboard / API), and hosts creator sites on *.area12.lol.

2. Information we collect

Account data via Firebase Auth: email, display name, auth provider identifiers.
Site data in Neon Postgres: slugs, display names, template/config (including custom HTML you save), publish versions, membership roles, audit logs, and billing upgrade requests.
Media uploaded through our API may be stored with ImgBB (third-party host).
Payment signals: we do not process card numbers ourselves. Premium plans are paid on Ko-fi; you may email us proof for human verification.
Technical logs: standard request logs (IP, user-agent, path) as processed by Cloudflare Workers for security and reliability.

3. How we use data

Authenticate you and operate the dashboard
Create, publish, and serve your sites on *.area12.lol
Enforce plans, prevent abuse, and respond to support requests
Verify Ko-fi upgrade proofs manually

We do not sell your personal information.

4. User-generated HTML

Custom HTML and other content you publish is stored and served as you provide it. Visitors to your subdomain may load scripts, assets, and trackers you include — that is under your control and responsibility. Do not embed malware or collect others’ data unlawfully.

5. Third parties

Firebase (Google) — authentication
Neon — Postgres database
ImgBB — image hosting for uploads
Ko-fi — optional payments
Cloudflare — Workers hosting, DNS, and edge security

Those services process data under their own policies when you interact with them.

6. Retention

We retain account and site data while your account is active. Archived or deleted sites may remain in backups for a limited period. You may request deletion by emailing us; we will delete or anonymize personal data except where we must retain records for security, fraud prevention, or legal obligations.

7. Security

We use industry-standard measures (HTTPS, auth tokens, least-privilege access). No method of transmission or storage is 100% secure. Custom HTML can introduce client-side risks for your visitors — review what you publish.

8. Children

The service is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). Do not create an account if you are under that age.

9. Changes

We may update this Policy. The “Last updated” date above will change when we do. Continued use after updates constitutes acceptance of the revised Policy.

10. Contact

Privacy questions: ziad@area12.lol · Discord: discord.gg/a9JM5fhsf