Privacy Policy
Last updated: June 2026
This explains what GASS collects and why. We collect as little as possible and never sell your data.
What we store
Email (captured by Stripe at checkout) — your account identifier. Credit balance & purchase/credit history — to run your account. Your hype history (the situations you entered and the text generated) — so you can see past hypes; we keep the most recent 30. An anonymous device id — to count free hypes and rate-limit abuse. We do not store passwords (login is via one-time magic links).
Processors we share data with
Stripe (payments), Anthropic(generates Gass's text from your input), ElevenLabs (voice), Resend (magic-link email), Supabase (database), Upstash (rate-limit/cache), and Vercel (hosting). Your situation text is sent to Anthropic and ElevenLabs to produce the hype.
Cookies
We use a few first-party cookies only: a signed session cookie (to keep you logged in), a device id (free-tier counting / abuse limits), and an age-confirmation flag. No third-party ad tracking.
Your rights (GDPR/CCPA)
While logged in you can download all your data or permanently delete your account from the History panel (or via /api/account/export and DELETE /api/account). Deletion removes your account, history, and ledger; we may retain minimal payment records where required by law.
Retention
Hype history is capped at your latest 30 entries; anonymous device history is purged after ~90 days. Caches expire automatically.
Contact
Privacy questions: privacy@yourdomain.example (update before launch).