Privacy Policy

Who we are

Llama Builder ("Llama Builder", "we", "us", or "our") is operated by Skeleton Crew LLC, a Washington limited liability company. This Privacy Policy explains what information we collect when you use Llama Builder at lbd.one (the "Service"), how we use it, and the choices you have. If you have questions, contact us at privacy@lbd.one.

Information we collect

We collect only what we need to run and improve the Service.

Account and identity information. You sign in through a third-party provider: Google, Discord, Facebook, or Patreon. When you do, we receive your name, email address, profile image, a unique account identifier from that provider, and whether the provider has verified your email. We use this to create and secure your account.

Content you create. Your projects are saved in your browser on your device. When you are signed in, we also store your projects and any images you upload on our servers, so you can open them on other devices and download them.

Subscription and billing information. If you purchase a paid plan, your payment is processed by Stripe. We store your subscription status (such as your plan tier), but we do not collect or store your full payment card number. Stripe handles card data directly; see Stripe's Privacy Policy for how they process it.

Technical information. Our servers record basic technical data needed to operate and secure the Service, such as your IP address and request logs.

Translations. If you use automatic translation for an item's catalog name and description, we send that text to AWS to produce the translations.

Usage analytics. We use Google Analytics 4 to understand how the Service is used so we can improve it: for example, which pages are visited and which features are used (such as creating a project). Google Analytics collects usage and interaction events, device and browser information, and an approximate location (such as city or region) derived from your IP address. Our servers also report each request to our API to Google Analytics: which endpoint was called, whether it succeeded, and how long it took. For a visitor without Google Analytics cookies, that report carries a random-looking identifier that we derive from your IP address and browser with a secret key and change every day, so it cannot be traced back to your IP address and does not follow you from one day to the next. Your IP address itself is not sent. Google processes this data on our behalf; see Google's Privacy Policy for how they handle it.

Cookies. We use our own cookies to keep you signed in and to remember basic preferences, such as whether to show the welcome screen. Google Analytics also sets first-party cookies (named _ga and _ga_*) on lbd.one to distinguish visitors and sessions for the usage analytics described above. In the European Economic Area, the United Kingdom, and Switzerland, Google Analytics runs without cookies, and we store nothing on your device for analytics.

How we use information

We use the information above to:

• provide, maintain, and improve the Service;
• understand how the Service is used, through the usage analytics described above;
• authenticate you and keep your account secure;
• process subscriptions and payments;
• respond to your support requests;
• detect, prevent, and address abuse, fraud, or security issues; and
• comply with our legal obligations.

How we share information

We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising.

We share information only with service providers that help us run the Service, and only as needed for them to do their work:

• Authentication: Google, Discord, Facebook, and Patreon (when you choose them to sign in).
• Payments: Stripe.
• Hosting, storage, email, and translation: Amazon Web Services (AWS).
• Analytics: Google (Google Analytics 4).

We may also disclose information if required by law, or to protect the rights, safety, and security of our users, the public, or the Service.

Where your information is stored

Llama Builder is operated in the United States, and our hosting and storage run on AWS in the United States. If you access the Service from outside the United States, you understand that your information will be processed in the United States.

How long we keep information

We keep your account information for as long as your account is active. If you ask us to delete your account, we will delete your personal information and the content you've stored, except where we need to retain limited records to comply with the law, resolve disputes, or enforce our agreements. Providers such as Stripe, Google (for analytics data), and the sign-in providers keep their own records under their own policies.

Your privacy rights

Depending on where you live, you may have rights over your personal information.

If you are in the European Economic Area, the United Kingdom (GDPR), or Switzerland (FADP): you have the right to access, correct, delete, restrict, or object to our processing of your personal information, and to receive a copy of it in a portable format.

If you are a California resident (CCPA/CPRA): you have the right to know what personal information we collect and how we use it, to request deletion or correction, and to opt out of the "sale" or "sharing" of personal information. We do not sell your personal information. You may exercise these rights by contacting us.

You can delete your account and download a copy of your data at any time from your account page. For anything else, or if you prefer email, contact us at privacy@lbd.one. We will not discriminate against you for exercising your rights. You may also have the right to lodge a complaint with your local data protection authority.

Children's privacy

Llama Builder is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you are between 13 and 17, you may use the Service only with the consent and supervision of a parent or guardian. If you believe a child under 13 has given us personal information, contact us at privacy@lbd.one and we will delete it.

Security

Data is encrypted in transit and at rest, access is limited to what is needed to operate the Service, and hosting and payments run on AWS and Stripe. No online service is perfectly secure; if we learn of a problem, we will fix it and tell affected users where the law requires.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Significant changes will be communicated through the Service.

Contact us

For questions about this policy or your information, email privacy@lbd.one.