Privacy Policy

1. Introduction

Manabit ("we", "us", "our") is a web-based pixel art editor operated by coldfox. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to all users of the Manabit application at manabit.app.

2. Information We Collect

Account data — When you create an account, we collect your email address and any profile information you choose to provide (such as a display name). We store your preferences for receiving communications from us.

Project data — Your pixel art projects, including layers, palettes, and pages. Depending on how you use the service, some of this data may be stored on our servers.

Reference images — If you use features that allow it, we may store reference images you upload in association with your account.

Payment and billing data — When you subscribe to a paid plan, we receive billing-related information from our payment provider (such as subscription status and billing address). We do not collect or store your full payment card details; those are handled by our payment provider.

Usage and analytics data — We use analytics and advertising-related services to understand how the service is used. These may collect information such as pages viewed, device type, browser, and referral source.

Local storage and cookies — We use browser storage and cookies to keep you signed in, remember your preferences, and support core app functionality.

3. How We Use Your Information

• Provide, operate, and maintain the Manabit service
• Authenticate your identity and manage your account
• Sync projects, palettes, and preferences across your devices (Pro)
• Process subscription payments through PayPal
• Send product updates and promotional offers (only if you opt in)
• Improve the app using aggregated, anonymized analytics
• Enable real-time collaboration (sharing project state with collaborators you invite)

4. Third-Party Services

We rely on the following third-party services to operate Manabit. Each has its own privacy policy:

• Supabase — Authentication, database, and serverless functions (Privacy Policy)
• PayPal — Subscription billing and payment processing (Privacy Policy)
• Google Analytics — Usage analytics (Privacy Policy)
• Pinterest — Conversion tracking (Privacy Policy)
• X (Twitter) — Conversion tracking (Privacy Policy)
• jsDelivr / Google Fonts — CDN for static assets and web fonts

5. Data Sharing

• We do not sell your personal data.
• Data is shared only with the third-party services listed above, solely as necessary to operate the service.
• When you use real-time collaboration, your project data is visible to the collaborators you invite.
• We may disclose information if required to do so by law or in response to a valid legal request.

6. Data Storage and Security

Cloud data is stored in Supabase with Row Level Security, meaning each user can only access their own data. All data in transit is encrypted via HTTPS/TLS. Local data is stored in your browser's localStorage and sessionStorage.

While we take reasonable measures to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

7. Data Retention

• Account and project data are retained for as long as your account exists.
• Automatic history backups (Pro) are retained per project while the project exists.
• When you delete your account, all associated cloud data is removed.

8. Your Rights

• Access — View your data in Account settings at any time.
• Export — Download your projects as .manabit files or export as PNG/GIF.
• Deletion — Delete individual projects, or delete your entire account to remove all cloud data.
• Opt-out — Unsubscribe from marketing emails via Preferences in your account.
• For GDPR, CCPA, or other data rights requests, please contact us through our Discord support server.

9. Children's Privacy

Manabit is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted within the app. Your continued use of Manabit after changes are posted constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or your data, reach out to us on our Discord support server.