Wicked Hybrids ("we", "us", "our") operates the website at wickedhybrids.com. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

By using Wicked Hybrids you agree to the practices described here. If you do not agree, please do not use the service.

1. Information We Collect

Account information. When you create an account — either with email/password or via Google — we store your email address, a display name, and (for Google sign-in) the profile picture Google provides.

User-generated content. Hybrid creatures, AI-generated backgrounds, and AI-generated videos you produce are stored on our servers and linked to your account. Comments and posts you submit to the Feed are stored and publicly visible.

Token and purchase records. We keep a record of your daily token usage and purchased-token balance. When you buy tokens, we store a reference to the Stripe payment session ID so we can correctly credit your account and prevent duplicate credits. We do not store full card numbers or payment details — those are handled entirely by Stripe.

Usage data. Standard web server logs (IP address, user-agent, page requested, timestamp) may be retained for security and abuse prevention.

2. How We Use Your Information

• To provide and operate the service (authentication, content storage, token accounting)
• To process purchases and credit your token balance
• To display your content on the Feed and your public profile page
• To detect and prevent fraud or abuse
• To communicate with you about your account (e.g., magic link emails)

We do not sell your personal information to third parties, and we do not use your data for advertising profiling.

3. Third-Party Services

Wicked Hybrids relies on the following third-party providers. Each has its own privacy policy and data practices:

• Supabase — database, authentication, and file metadata. Data is stored in the EU (Ireland) region. Supabase Privacy Policy.
• Google AI (Gemini) — processes the parent-animal images you select in order to generate your hybrid creature and background images. Images are sent to Google's API servers and are subject to Google's Privacy Policy. Gemini API data is not used to train Google's models by default under the API terms.
• Google Cloud / Veo — used for video generation. Same Google data policies apply.
• Cloudflare R2 — stores all generated images and videos. Data is served via Cloudflare's global CDN. Cloudflare Privacy Policy.
• Stripe — processes all payments. We transmit your purchase amount and a session token to Stripe; Stripe collects and handles card details directly. Stripe Privacy Policy.
• Google OAuth — if you sign in with Google, Google shares your email address, name, and profile picture with us under Google's OAuth consent. Google Privacy Policy.
• Hostinger — our web hosting provider. Server log files are stored on Hostinger infrastructure. Hostinger Privacy Policy.

4. Cookies and Sessions

We set a single first-party session cookie (fc_session) to keep you logged in. This cookie contains a signed JSON Web Token (JWT) that identifies your account. It is not used for tracking or advertising.

No third-party advertising or analytics cookies are set by Wicked Hybrids.

5. Public Content

Your username, profile page, hybrid creatures, Feed posts, and comments are publicly visible to all visitors, including visitors who are not logged in. If you do not want content to be public, do not post it.

6. Data Retention

Your account data and generated content are retained for as long as your account is active. Deleted posts and comments are removed from public view immediately. If you wish to delete your account and all associated data, contact us at the address below.

7. Children's Privacy

Wicked Hybrids is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us and we will delete the account promptly.

8. Your Rights

Depending on your location you may have rights to access, correct, export, or delete personal data we hold about you. To exercise any of these rights, email us at legal@wickedhybrids.com. We will respond within 30 days.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Effective date" at the top of this page will reflect the most recent revision. Continued use of the service after a change constitutes acceptance of the updated policy.

10. Contact

Questions about this Privacy Policy? Email us at legal@wickedhybrids.com.