Privacy Policy

This policy explains what RoShirtMaker ("we", "us") collects when you use roshirtmaker.com, why, who helps us process it, and the choices you have. RoShirtMaker is run by an independent developer. Questions: support@roshirtmaker.com.

RoShirtMaker is an independent tool. It is not affiliated with, endorsed by, or sponsored by Roblox Corporation.

What we collect

When you use the maker and the tester

The shirt maker, shirt tester and template maker run in your browser. The designs you make and the images you add or upload to them are not sent to us. Your unfinished design is saved in your browser's local storage on your device so it's still there when you come back; clearing your browser data removes it. Downloads are created on your device.

When you use AI designs

AI designs use credits. To give a visitor free credits and keep their designs together, we may create a guest session in your browser. For it we store:

a random guest account ID and a session cookie,
your credit balance,
the IP address and browser user agent your session was created from.

When you generate an AI design, we store your text prompt and the design it produced, so you can find it again in My designs, plus a record of the generation (the style you chose, the result and the time). Any image you attach to an AI request is resized in your browser, sent to our AI provider to make your design, and not stored by us afterwards.

Google shares your name, email address, profile picture and Google account ID with us. We also store the sign-in tokens Google issues so your sign-in keeps working. We never see your Google password. If you signed in from a guest session, the designs from that session move to your account.

Payments

Payments are handled by Waffo.com Limited ("Waffo"), which sells our plans and credit packs to you as our merchant of record and handles tax. Waffo's own privacy policy applies to the details you enter at checkout. We receive and store your order and subscription IDs, plan and payment status. We never receive or store your full card details.

Support messages

If you contact us, we keep your name, email address and message so we can reply.

Technical and abuse-prevention data

To stop people farming free credits, we count guest sessions and new accounts per IP address per day. These counters are deleted after 48 hours.
Cloudflare Turnstile checks that a real person is starting a guest session. It evaluates signals from your browser and device; see Cloudflare's privacy policy.
Our hosting provider keeps short-term server logs (such as IP address, requested page and time) for security and troubleshooting.

Usage analytics

We use PostHog to see how the site is used: pages visited, referring site, device and browser type, approximate location from your IP address, and actions such as choosing a style, downloading a design, generating an AI design and starting or completing a checkout. Session replays record how you move through the site, with text typed into fields masked. Once you sign in, these events are linked to your account ID (not your email). In Europe we only use analytics cookies and session replay if you accept them; see the Cookie Policy. We don't use advertising cookies.

How we use it

To run RoShirtMaker: generate AI designs, keep your history, track your credits and plan.
To prevent abuse and keep the service secure, including limiting free credits per person.
To process payments and handle billing questions.
To understand how the site is used and improve it.
To answer your messages.
To meet legal obligations.

We don't sell your personal information, and we don't use your prompts, uploads or designs to train AI models.

If you are in the EEA or UK, we rely on contract (to provide the service you asked for), our legitimate interests (security, abuse prevention and cookieless usage statistics), your consent (analytics cookies and session replay), and legal obligation as our legal bases.

Who processes your data

We use these providers to run RoShirtMaker. Each processes data only to provide its service to us:

Provider	What for	Data involved
Cloudflare	Hosting, image storage, bot check (Turnstile), abuse counters	Service data, IP address, AI designs
Neon	Database	Account, session, credit and generation records
EvoLink, running OpenAI's GPT Image 2 model	AI image generation	Your AI prompt and attached images
fal.ai, running the same GPT Image 2 model	AI image generation when EvoLink is unavailable	Your AI prompt and attached images
SeeAPI	Checking AI prompts, attached images, avatars and generated images for prohibited content	Prompts and images
Google	Sign-in	Name, email, profile picture, Google account ID
Resend	Sending emails (such as contact-form messages)	Email address and message
Waffo (merchant of record)	Payments, tax and refunds	Billing and payment details
PostHog	Usage analytics and session replay	Usage events, device and browser data, IP address, account ID

These providers are based in, or process data in, the United States. Where the law requires it, transfers are covered by appropriate safeguards such as Standard Contractual Clauses.

We may also disclose information if required by law, or to protect the rights and safety of our users or others.

How long we keep it

Designs you make in the maker: only in your browser, until you clear it.
Account data and AI designs: until you delete your account.
Guest sessions: a guest session signs out after 7 days without use. If a guest account isn't used for 30 days, we delete it, including its generation history and AI designs.
Abuse-prevention counters: 48 hours.
Analytics events and session replays (PostHog): up to 1 year.
Images attached to AI requests: not stored by us after generation.
Payment records: as long as tax and accounting law requires.

Your choices and rights

Delete your account any time in Settings → Security. This deletes your account, your credits, your generation history and your AI design files.
Access, correct or export your data, or ask any privacy question, by emailing support@roshirtmaker.com.
Depending on where you live (for example the EEA, UK or California), you may have further rights, such as to object to or restrict processing, and to complain to your local data protection authority. We don't sell or share personal information for targeted advertising.

Children

RoShirtMaker is not for children under 13, and you must be at least 13 (or older where your country requires it) to use it. If you are under 18, use RoShirtMaker with your parent's or guardian's permission. If we learn that we collected personal information from a child under 13, we will delete it. Parents can contact us at support@roshirtmaker.com.