Privacy Policy
Effective October 18, 2026
This policy explains what personal information Anchorforge Digital ("we") collects when you use Curblit, and how we use it. When you publish a site for your own visitors, you are responsible for the privacy notices and legal obligations that apply to your site and the information it collects.
Information we collect
- Account information: your email address, name and profile picture (if you sign in with Google or GitHub).
- Your content: prompts, uploaded images, generated websites, version history and settings.
- Billing information: handled by Stripe. We receive your plan, billing status and the last digits of your card, never your full card number.
- Usage information: credits used, generation logs and basic technical data (such as IP address and browser) used for security, abuse prevention and rate limiting.
Information about your site's visitors
When people visit a site you publish with us, our built-in analytics store aggregated page-view counts by page, day and referral source; these records do not contain visitor names or IP addresses. IP addresses may be processed in short-lived security and rate-limit records, which are routinely cleaned up. When visitors submit a form on your site, we store the submission for you. You decide what information to request and how to use it, and are responsible for the notices and permissions required for that collection.
Cookies and analytics on Curblit
We use cookies needed for functions such as authentication and referral attribution. Your theme and some interface preferences are saved in your browser's local storage. We use Vercel Web Analytics on Curblit; it does not use cookies, but uses a request-derived identifier for aggregated analytics and does not track visitors across unrelated sites. Optional Google Analytics or Meta Pixel scripts may be enabled on Curblit through configuration, and customers may add those tools to their published sites. Those services may use cookies or similar technologies. If you enable them, you are responsible for any notices or consent required by applicable law.
How we use information
To provide and improve the Service, generate and host your sites, process payments, send transactional emails (like form notifications and receipts), prevent fraud and abuse, and comply with law. We don't sell personal information.
Service providers
We use service providers to run the Service, including Supabase (database, authentication and file storage), Vercel (hosting and analytics), Stripe (payments), OpenRouter and the model providers it routes to (AI generation), and Resend (email). When you request AI generation, relevant prompts and site content are sent to OpenRouter and the selected model provider to produce the result. Provider privacy, security and retention terms may apply to that processing; don't include sensitive information in prompts unless you are comfortable sharing it for generation.
Retention
We keep account data while your account is open. When you request account deletion in Settings, we cancel an active subscription where possible, take published sites offline and delete associated account records and files. Some information may remain temporarily in backups, in provider systems under their retention policies, or where needed for legal, accounting, security or fraud-prevention purposes.
Your rights
Depending on where you live, you may have rights to access, correct, delete or restrict certain processing of your personal information. You can update some account details or request account deletion in Settings. For other requests, email anchorforgedigital@gmail.com.
Security
We use encryption in transit, row-level access controls and least-privilege keys. Generated sites are served from a separate domain and previews run in a sandbox so site code can't access your account.
Children
Curblit isn't directed to children under 16, and we don't knowingly collect their information.
Changes
We'll post updates here and, for material changes, notify you by email.