Privacy Policy

1. Introduction

BlueprintsLab ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website (gamedevcore.com), the Ultimate Engine CoPilot plugin ("the Plugin"), and related services. By using our services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.

2. Data We Collect

2.1 Account Information (Optional)

If you create a website account, we collect your email address (via Supabase Auth) and any profile information you provide (username, avatar, bio). A website account is optional and is not required to activate or use the Plugin.

2.2 Purchase & License Data

Your FAB order ID and associated license / entitlement information, used to verify your purchase. We do not store complete credit card numbers; payment processing is handled by PayPal and NOWPayments, which expose only their own transaction or invoice identifiers to us.

2.3 Activation Identifier

When you activate the Plugin, it generates a random activation ID on your computer and registers it against your FAB order to verify your seat. This identifier is randomly generated — it is not derived from your hardware, username, or machine, and contains no personal information.

2.4 Usage & Free-Tier Data

To operate the free AI tier and improve the product, we collect minimal usage events (which tools are invoked — not the content they process) and token-consumption counts associated with your activation ID. Free-tier rate-limit counters reset automatically and are not retained beyond the current reset cycle.

2.5 Learning Progress

If you use the Learning module, your course and lesson progress, XP, level, streaks, achievement unlocks, daily login records, and leaderboard display name are stored against your activation ID or account.

2.6 Bug Reports (Only When You Submit One)

A bug report includes your FAB order ID, activation ID, the report type, your message, the Plugin and engine version, and the active AI model name. A conversation transcript is included only if you explicitly choose to attach one.

2.7 Community & Referrals

If you use our community forum or referral / affiliate program, we collect the information you provide there: messages, replies, image uploads, reactions, direct messages (visible only to participants), online status and last-seen timestamps for the forum; referral codes, click tracking, commission records, and payout method preferences (PayPal email or crypto wallet address) for the affiliate program. Referral click tracking uses hashed IP values, not full IP addresses.

2.8 AI Conversation History

Your AI chats are stored locally on your computer and are never transmitted to our servers, except when you explicitly attach a conversation to a bug report (see 2.6). The same applies to AI Memory entries, Game Design Documents (GDD), Plugin settings and preferences, project scan / index data, API key configurations, and generated textures / materials / 3D models — all stored locally on your machine and never sent.

2.9 Local Encryption

To protect configuration and credentials saved on your computer, the Plugin derives a local encryption key from an anonymized device identifier provided by your operating system. This identifier is used solely for local, on-device encryption and is never transmitted, logged, or stored by us.

2.10 Network-Level Data (Handled by Hosting Providers)

When you visit the website or the Plugin contacts our backend, our hosting providers (Vercel, Supabase) transiently process standard request metadata, including your IP address, as part of delivering the service. This is normal web infrastructure logging and is governed by their respective privacy policies. We additionally store the originating IP address of a FAB order submission to detect spam and order sharing, but we do not use IP addresses for license validation and IPs are never returned in any API response or exposed to the Plugin.

3. How We Use Your Data

• Verify your seat using the randomly generated activation ID registered against your FAB order
• Process purchases and verify FAB marketplace orders
• Provide customer support and account management
• Track learning progress, award XP, and manage gamification features
• Manage community features (forums, direct messages)
• Enforce rate limits on free tier usage
• Deliver content updates (AI prompt files, documentation)
• Calculate and pay referral commissions
• Improve our products through aggregated, anonymized analytics
• Prevent fraud and unauthorized access
• Comply with legal obligations

We do not perform individual user behavioral tracking or profiling. We do not sell your personal data to third parties.

4. Third-Party Services

We use the following third-party services:

• Supabase - Database, authentication, and file storage
• Vercel - Website hosting and serverless functions
• PayPal - Payment processing for purchases and donations
• NOWPayments - Cryptocurrency payment processing
• Brevo (Sendinblue) - Transactional email delivery
• FAB (Epic Games) - Marketplace purchase verification
• Counter.dev - Privacy-friendly visitor analytics

The Plugin allows you to connect to third-party AI providers of your choice (OpenAI, Anthropic, Google, etc.). Your interactions with these services are governed by their own privacy policies. We do not control, monitor, or store the data you exchange with them.

If you use the free tier, your AI requests are routed through our proxy server for rate limiting. The proxy forwards your request and counts tokens but does not log or store the content of your prompts or responses.

You may also use a locally hosted LLM, in which case your AI data remains entirely on your machine.

5. Cookies and Tracking

We use cookies to:

• Maintain your authenticated session (Supabase auth cookies)
• Remember your language preferences
• Track referral codes (30-day cookie for affiliate attribution)

We use Counter.dev for privacy-friendly visitor analytics. We do not use invasive tracking tools like Google Analytics.

You can manage cookie preferences through your browser settings.

6. Data Security

We implement reasonable security measures to protect your data:

• All data transmissions use HTTPS/TLS encrypted connections
• API keys you configure are stored locally and never transmitted to our servers
• Database access is restricted through Row Level Security (RLS) policies
• Activation IDs are randomly generated GUIDs — no hardware data is collected, derived, or stored
• Admin operations require authenticated service role keys
• Webhook signatures are verified using HMAC-SHA512

While we take reasonable precautions, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

7. Data Retention

• Account data: Retained for the duration of your account
• Device & license data: Retained for as long as your license is active
• Learning progress: Retained for the duration of your account
• Community messages: Retained until deleted by the user or moderation action
• Free tier usage: Token counters reset automatically (every 6-24 hours)
• Local data: Persists on your machine until you manually delete it or uninstall the Plugin
• Referral data: Commission records retained for tax and legal compliance purposes

8. Your Rights & Choices

• Access: You can access your personal data through your account page
• Correction: You can update your profile information at any time
• Deletion: You can request deletion of your account and associated data
• AI provider choice: You choose which AI provider processes your data, or use a local LLM for complete privacy
• Free tier opt-out: Use your own API keys to communicate directly with AI providers without our proxy
• Local data: Clear conversation history, AI memory, and all locally stored data through the Plugin's interface
• Opt-out of marketing: Unsubscribe from any marketing communications
• Uninstallation: Removing the Plugin stops all data collection. Local files remain until manually deleted

To exercise these rights, contact us at blueprints.lab@gamedevcore.com

9. Children's Privacy

Our services are not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

10. International Data Transfers

Our backend services (Supabase, Vercel) may process data in regions outside your country of residence. By using our services, you consent to the transfer of information to countries that may have different data protection laws than your jurisdiction.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on our website and, where appropriate, communicated through the Plugin's announcement system or email. Your continued use of our services after any changes constitutes your acceptance of the updated policy.

12. Consent

By creating an account on gamedevcore.com, installing, activating, or using Ultimate Engine CoPilot, you agree to this Privacy Policy. If you do not agree with any part of this policy, you must discontinue use of our services immediately.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data:

• Email: blueprints.lab@gamedevcore.com
• Discord: discord.gg/w65xMuxEhb
• Website: gamedevcore.com