Privacy Policy

1. Introduction

BlueprintsLab ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website (gamedevcore.com), the Ultimate Engine CoPilot plugin ("the Plugin"), and related services. By using our services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.

2. Data We Collect

2.1 Account Information (Website)

• Email address (account registration via Supabase Auth)
• Username and profile information
• Avatar image (uploaded to Supabase Storage)
• Authentication session tokens (stored as secure cookies)

2.2 Device & Hardware Information (Plugin)

When you activate or use the Plugin, the following is collected for license verification:

• Windows username (operating system user account name)
• Machine name (computer's network name)
• Hardware fingerprint (SHA1 hash of machine login ID and computer name)
• PC specifications: CPU brand, GPU brand, RAM amount, OS version
• Unreal Engine version

2.3 Purchase & License Data

• FAB order IDs (for marketplace purchase verification)
• License keys (generated for website purchases)
• Payment transaction IDs (PayPal order/capture IDs, NOWPayments invoice IDs)
• Purchase amounts and product tier information
• Device activations linked to licenses (hardware binding)

We do not store complete credit card numbers. Payment processing is handled by PayPal and NOWPayments.

2.4 Learning Module & Gamification Data

If you use the Learning Module (via the website or embedded in the Plugin), we collect:

• Course progress and lesson completion status
• XP earned, level, streaks, and achievement unlocks
• Daily login records (for streak tracking)
• Display name and leaderboard preferences

2.5 Plugin Usage Analytics

The Plugin may send anonymized usage events to our servers for analytics and product improvement:

• Tool usage events (which tools were used, not the content processed)
• Session heartbeats (duration of active sessions)
• Blueprint generation counts (number of nodes generated)
• Python script execution metadata (success/failure, not script content)

2.6 Free Tier Usage Data

• Token consumption counts (to enforce rate limits on shared free-tier resources)
• Rate limit metadata: slot selection, token counts, and reset intervals

Usage counters reset automatically. Historical usage data is not retained beyond the current reset cycle.

2.7 Community Data

If you participate in our community forum:

• Messages and thread replies you post
• Images you upload (stored in Supabase Storage)
• Reactions and emoji responses
• Direct messages (visible only to participants)
• Online status and last seen timestamps

2.8 Referral & Affiliate Data

• Referral codes and click tracking (IP hashes, not full IPs)
• Commission records for affiliates and creators
• Payout method preferences (PayPal email or crypto wallet address)

2.9 Locally Stored Data (Never Transmitted)

The following data is stored exclusively on your local machine and is never sent to our servers:

• AI conversation history and chat logs
• AI Memory entries (persistent cross-session memory)
• Game Design Documents (GDD)
• Plugin settings and preferences
• Project scan/index data
• API key configurations
• Generated textures, materials, and 3D models

3. How We Use Your Data

• Verify and enforce licensing through hardware-bound activation
• Process purchases and verify FAB marketplace orders
• Provide customer support and account management
• Track learning progress, award XP, and manage gamification features
• Manage community features (forums, direct messages)
• Enforce rate limits on free tier usage
• Deliver content updates (AI prompt files, documentation)
• Calculate and pay referral commissions
• Improve our products through aggregated, anonymized analytics
• Prevent fraud and unauthorized access
• Comply with legal obligations

We do not perform individual user behavioral tracking or profiling. We do not sell your personal data to third parties.

4. Third-Party Services

We use the following third-party services:

• Supabase - Database, authentication, and file storage
• Vercel - Website hosting and serverless functions
• PayPal - Payment processing for purchases and donations
• NOWPayments - Cryptocurrency payment processing
• Brevo (Sendinblue) - Transactional email delivery
• FAB (Epic Games) - Marketplace purchase verification
• Counter.dev - Privacy-friendly visitor analytics

The Plugin allows you to connect to third-party AI providers of your choice (OpenAI, Anthropic, Google, etc.). Your interactions with these services are governed by their own privacy policies. We do not control, monitor, or store the data you exchange with them.

If you use the free tier, your AI requests are routed through our proxy server for rate limiting. The proxy forwards your request and counts tokens but does not log or store the content of your prompts or responses.

You may also use a locally hosted LLM, in which case your AI data remains entirely on your machine.

5. Cookies and Tracking

We use cookies to:

• Maintain your authenticated session (Supabase auth cookies)
• Remember your language preferences
• Track referral codes (30-day cookie for affiliate attribution)

We use Counter.dev for privacy-friendly visitor analytics. We do not use invasive tracking tools like Google Analytics.

You can manage cookie preferences through your browser settings.

6. Data Security

We implement reasonable security measures to protect your data:

• All data transmissions use HTTPS/TLS encrypted connections
• API keys you configure are stored locally and never transmitted to our servers
• Database access is restricted through Row Level Security (RLS) policies
• Hardware fingerprints are stored as one-way hashes, not raw system identifiers
• Admin operations require authenticated service role keys
• Webhook signatures are verified using HMAC-SHA512

While we take reasonable precautions, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

7. Data Retention

• Account data: Retained for the duration of your account
• Device & license data: Retained for as long as your license is active
• Learning progress: Retained for the duration of your account
• Community messages: Retained until deleted by the user or moderation action
• Free tier usage: Token counters reset automatically (every 6-24 hours)
• Local data: Persists on your machine until you manually delete it or uninstall the Plugin
• Referral data: Commission records retained for tax and legal compliance purposes

8. Your Rights & Choices

• Access: You can access your personal data through your account page
• Correction: You can update your profile information at any time
• Deletion: You can request deletion of your account and associated data
• AI provider choice: You choose which AI provider processes your data, or use a local LLM for complete privacy
• Free tier opt-out: Use your own API keys to communicate directly with AI providers without our proxy
• Local data: Clear conversation history, AI memory, and all locally stored data through the Plugin's interface
• Opt-out of marketing: Unsubscribe from any marketing communications
• Uninstallation: Removing the Plugin stops all data collection. Local files remain until manually deleted

To exercise these rights, contact us at blueprints.lab@gamedevcore.com

9. Children's Privacy

Our services are not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

10. International Data Transfers

Our backend services (Supabase, Vercel) may process data in regions outside your country of residence. By using our services, you consent to the transfer of information to countries that may have different data protection laws than your jurisdiction.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on our website and, where appropriate, communicated through the Plugin's announcement system or email. Your continued use of our services after any changes constitutes your acceptance of the updated policy.

12. Consent

By creating an account on gamedevcore.com, installing, activating, or using Ultimate Engine CoPilot, you agree to this Privacy Policy. If you do not agree with any part of this policy, you must discontinue use of our services immediately.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data:

• Email: blueprints.lab@gamedevcore.com
• Discord: discord.gg/w65xMuxEhb
• Website: gamedevcore.com