The short version.
We never sell your data, and we don't build advertising profiles. The only product with ads is the
free version of Gus Grimsby: Ghost Hunter, where Google shows them (see its section).
We collect only what a product needs to work, and you can ask us to delete it at any time.
1. Who we are
BrandBox LLC ("BrandBox", "we", "us") is a small, independent studio. This policy covers every
product we make, including our websites, web apps and iOS apps. Right now that means:
If a product has its own notes, you'll find them under Product by product.
Where those notes are more specific, they take priority for that product.
2. Our promises
We never sell your personal information. Not to advertisers, data brokers or anyone else, and not "sharing" in the sense some laws use for cross-context ad targeting.
No ads, no ad tracking, with one exception. Our products don't show third-party ads and we don't track you across other companies' apps or websites. The exception is the free version of Gus Grimsby: Ghost Hunter, which shows ads from Google AdMob. Buying Ad-Free turns them off completely.
Only what's needed. If a product can work without an account or a server, it does.
Your content is yours. What you make in our products belongs to you.
Deletion on request. Email us and we'll delete your data. You don't have to give a reason.
3. What we collect
Depending on the product, we may collect:
Account details. Such as your email address, a username, and your name or company name if you give them. If you sign in with Google, Google shares your email and basic profile with us. We never receive your password for that account.
Content you create or upload. Such as game scores and saves, packaging prompts, images and files, and project details.
Purchase records. Such as what you bought and when. Card details are handled by the payment processor (Stripe on the web, Apple in our iOS apps) and never reach our servers.
Usage and device data. Such as pages visited, features used, browser and device type, IP address and error logs. We use this to keep things running and to understand what to improve.
Messages you send us. Such as support emails and feedback.
To provide the product, including sign-in, saving your work, processing purchases and showing leaderboards.
To keep it secure and prevent fraud, cheating and abuse.
To fix bugs and improve features, mostly using aggregated usage data.
To reply to you and send important service messages, such as receipts or security notices.
To send product news, but only if you've opted in. You can unsubscribe at any time.
To meet legal obligations.
We do not use your information for advertising profiles, and we do not sell it. In Gus Grimsby's free version, Google AdMob may use device data to show and measure ads, as described under Gus Grimsby.
5. Who we share it with
We share information only with service providers who help us run our products. They may use it
only to do that work for us, under their own privacy and data-processing terms:
Hosting, database and sign-in: Supabase, Vercel and Cloudflare.
Payments: Stripe (web) and Apple (App Store purchases).
Email delivery: Resend, for sign-in links, receipts and service messages.
Web analytics: Google Analytics, on some of our websites.
Push notifications: OneSignal, for Arcade only, if you choose to turn notifications on.
AI processing: BrandBox AI sends your prompts and uploads to AI model providers to generate your results.
Advertising: Google AdMob, only in the free version of Gus Grimsby: Ghost Hunter.
We may also disclose information if the law requires it, to protect people's safety or our
rights, or as part of a merger or sale of the business. If that happens, this policy will
continue to apply to your information.
6. Product by product
Arcade arcadegaming.app
You can play without an account. If you create one, we store your email, username, and optional Google display name and avatar, along with your scores, saves, tokens and wardrobe.
Your username and scores are public on leaderboards. Your email is never shown.
We use Google Analytics to understand which games people play. Settings like theme and 2D or 3D view are stored in your browser.
If you allow browser notifications, OneSignal delivers them. You can turn them off in your browser at any time.
Gridiron Rush iPhone & iPad
We collect no data. No accounts, no analytics, no ads and no tracking.
Your progress and settings are saved on your device and synced through your own iCloud account, which is run by Apple. We can't see it.
Purchases and the free trial are handled by Apple through the App Store. We never see your payment details.
CrayonPals iPhone & iPad
We collect no data. CrayonPals follows Apple's Kids Category rules: no accounts, no ads, no analytics, no tracking, no crash reporting and no servers of its own.
Your child's colorings, pets, names and farm stay on the device, with an optional copy in your own private iCloud. A grown-up can turn that off in the app's settings.
The camera is used only for the live "In my room" view. Nothing is recorded or sent anywhere.
A picture is saved to Photos only after a grown-up passes a parental check. The app can add pictures to your library but can't read it.
Deleting the app removes everything on the device. You can remove the iCloud copy in Settings › [your name] › iCloud.
Gus Grimsby: Ghost Hunter iPhone & iPad
We collect no data ourselves. No accounts and no analytics of our own. Your progress, ghosts and settings stay on your device.
Ads. The free version shows ads from Google AdMob between runs, never during play. Google may collect your device's advertising identifier (only if you allow tracking when the app asks), approximate location from your IP address, and ad-interaction and diagnostic data, to show and measure ads. See how Google uses data.
Your choices. Where the law requires it, the app asks for consent before any ads are personalized, and you can change that choice at any time. You can also decline tracking in the app's prompt or in iOS Settings › Privacy & Security › Tracking.
Ad-Free. A one-time purchase handled by Apple removes all ads, and with them all data collection by AdMob. We never see your payment details.
The game is rated 9+ and is not directed to children under 13.
BrandBox AI brandboxai.app
Accounts store your name, email, and optional company name and brand profile, such as your colors and logo.
Your prompts, uploads and generated mockups are saved to your library so you can come back to them and refine them.
To generate results, your prompts and images are sent to third-party AI model providers. We send only what's needed for the request.
Preflight runs entirely in your browser. The PDFs you check are never uploaded.
Payments go through Stripe. We use Google Analytics to see which features people use.
Amphora self-hosted WMS
Amphora runs on your own server. Your warehouse, inventory, client and order data stays in your installation, and BrandBox can't see it.
You are the controller of any personal data stored in Amphora, such as your staff and your clients' customers. We act only on your instructions, for example when you ask us for support.
If you give us access to your installation for support, we use it only for that request.
The getamphora.com website doesn't use analytics or tracking cookies.
This website BrandBox LLC
We use Google Analytics to count visits and see which products people look at. It doesn't use advertising features.
If you email us, we keep the conversation so we can reply.
7. Children
CrayonPals is made for children and collects no personal information at all. Our other
products, including Gus Grimsby: Ghost Hunter and its ads, are not directed to children under 13. We do not knowingly collect personal
information from children under 13. If you think a child has given us information, email
us and we'll delete it.
8. Your rights and choices
Wherever you live, you can ask us to:
Tell you what personal information we hold about you, and give you a copy.
Correct anything that's wrong.
Delete your account and data.
Stop sending you marketing email.
Email parth@brandboxai.app from the address on your
account. We'll respond within 30 days. We won't treat you differently for using these rights.
If you live in the EU, UK or a US state with privacy laws such as California, you may have
further rights under those laws, and we will honor them. You can also block analytics with
your browser settings or an ad blocker. Our products still work.
9. Retention and security
We keep your information for as long as your account is active or as long as we need it to
provide the product. When you delete your account, we delete your profile and content
within 30 days. Backups roll off on their normal schedule, and we keep records we're
legally required to hold, such as invoices. We use encryption in transit, access controls
and reputable infrastructure providers. No system is perfectly secure, but if a breach
affects you, we'll tell you promptly.
We're based in the United States, and our providers may process data there or in other
countries, using appropriate safeguards where the law requires them.
10. Changes and contact
If we change this policy, we'll update the date at the top. If a change is significant, we'll
tell you in the product or by email before it takes effect. One thing won't change: we will
never sell your data.
