Bubble Maker Privacy Policy
Bubble Maker respects your privacy. This Privacy Policy explains how information is handled when you use Bubble Maker, including the free local editor and optional Bubble Maker Pro account services.
This document is intended as a plain-language description of current product practice. It is not legal advice.
1. Local-First Design
Bubble Maker is designed to perform most editing and project work locally in your browser.
Your project data, imported fonts, reference images, and other creative files are generally stored and processed on your device using browser technologies such as local storage and IndexedDB.
You can use the editor without creating an account and without uploading projects to Bubble Maker cloud storage.
2. Information Bubble Maker Does Not Sell
Bubble Maker does not sell your personal information.
Bubble Maker does not claim ownership of your artwork, project files, imported fonts, reference images, Saved Styles, or exported content.
3. Free Editor Without an Account
The free editor does not require:
- an account;
- a username;
- a password; or
- payment information.
If you never create an account or subscribe to Pro, Bubble Maker does not store your projects on Bubble Maker cloud servers as part of ordinary editing.
4. Account Data (Bubble Maker Pro / signed-in use)
If you create a Bubble Maker account, we store account data needed to operate the account, such as:
- email address;
- account identifier;
- account status (including scheduled deletion, if requested);
- authentication and session data (including a hashed session token and related timestamps); and
- records of Terms and Privacy acceptance versions.
Magic sign-in codes are stored as hashes, expire, and are limited in attempts. We do not use passwords.
5. Billing
If you subscribe to Bubble Maker Pro, Paddle is the Merchant of Record and processes payment.
Bubble Maker does not store full payment card numbers or CVV. Paddle handles payment details according to Paddle’s terms and privacy information.
Bubble Maker stores billing and subscription identifiers and status needed to provide Pro, such as Paddle customer and subscription IDs, plan, subscription status, period dates, and cancellation-at-period-end flags.
For Paddle’s own privacy practices, see Paddle’s published privacy information (currently described at paddle.com).
6. Cloud Content
If you use Pro cloud features, Bubble Maker may store:
- cloud projects and project thumbnails;
- custom fonts you upload to sync;
- reference artwork and other project assets you upload to sync;
- Saved Styles; and
- cloud recovery versions.
You retain ownership of uploaded content. Bubble Maker receives only the limited permission needed to host, store, process, transmit, and render that content so the Service can sync and display it for you.
7. Operational Data
To operate cloud and account features, Bubble Maker may store operational metadata such as storage sizes, hashes, revision numbers, sync timestamps, subscription and cloud-lifecycle status, security and rate-limit related logs, and similar technical records.
This metadata is used to provide the Service, enforce the 3 GB storage limit, detect conflicts, and protect the Service. It is not used to sell advertising.
8. Custom Fonts and Reference Art
If you upload custom fonts or reference artwork, you are responsible for having appropriate rights or licenses to do so.
Bubble Maker does not verify font licenses or image rights, and does not claim those rights.
9. Local Browser Storage
Bubble Maker uses browser storage technologies such as localStorage and IndexedDB to provide core editor functionality.
These technologies may store information on your device such as:
- your current project and autosave state;
- editor preferences and settings;
- imported custom fonts;
- reference images;
- acceptance of the Terms of Use;
- What’s New seen/loved flags;
- a local analytics opt-out flag, if this browser has been excluded from analytics; and
- other information needed for Bubble Maker features to work.
This information is stored locally in your browser and is not used by Bubble Maker for advertising, behavioral profiling, or cross-site tracking.
If you use the free editor without Pro, Bubble Maker does not upload your locally stored project data, imported fonts, or reference images to a Bubble Maker server. Existing local projects are not bulk-uploaded when Pro starts. You can choose which existing projects to keep in Bubble Maker Cloud. Once a project is cloud-enabled, later changes and required project files such as synced fonts or reference assets may sync automatically as part of that project’s cloud sync.
You can remove locally stored Bubble Maker data at any time by clearing site data for bubblemaker.app in your browser.
Clearing browser or site data may permanently remove locally stored projects, imported fonts, reference images, preferences, and other editor data. For important work, you should save backup copies using Bubble Maker’s .bubblemaker project file feature.
10. Cookies
Bubble Maker does not intentionally use advertising or marketing cookies.
Cookies actually used include:
- bm_session — a first-party HttpOnly session cookie used to keep you signed in to a Bubble Maker account. It is a functional/security cookie, not an advertising identifier.
- an optional analytics opt-out stored as a simple on/off localStorage flag and a matching first-party cookie so this browser does not send analytics events. These values are not unique visitor identifiers and are not used for tracking.
Cloudflare or the browser may also set technically necessary cookies for hosting, security, or Cloudflare Access on admin pages. Admin Access cookies are for operator access to internal tools, not product analytics about customers.
11. Project Files and Exports
When you save a .bubblemaker project file or export PNG, SVG, or PDF files, those files are created for you to save on your device.
Bubble Maker does not automatically upload those files to a server. If you use Download All Projects, archives are generated for you to save and are not published as permanent public URLs.
12. Support Email
If you contact Bubble Maker at:
the information you include in your email may be received and processed through the email services used to receive and forward support messages. Incoming support mail is separate from outgoing transactional email.
Support correspondence may be retained for as long as reasonably necessary to respond to the request, resolve issues, maintain support or business records, prevent abuse or fraud, and comply with legal obligations.
Do not send sensitive personal information unless it is necessary for your support request.
Transactional account emails are sent to the email address on the account using Cloudflare email infrastructure. These may include sign-in codes, retention notices, account-deletion notices, and other operational account notices Bubble Maker sends. They do not include project names or project contents.
13. Feedback and Bug Reports
If you submit a bug report, feature request, or other feedback through Bubble Maker, the information you enter in the form is sent to Bubble Maker and stored so it can be reviewed.
Feedback submissions include your report or request text and a required contact email address. Bug reports may also include limited technical information that may help diagnose problems.
Technical information submitted with feedback may include your browser and browser version, operating system, viewport size, Bubble Maker artboard dimensions, number of objects in the current project, application version, whether a reference image is present, and the submission timestamp.
This technical information does not include your artwork, project text, imported font files, reference image contents, or full project data.
Your contact email address is used only for communication related to your feedback, such as requesting additional information, responding to your report, or following up on a feature request.
Feedback and bug-report submissions may be retained as long as reasonably necessary to evaluate the request, resolve bugs, follow up with the submitter, improve the product, and maintain abuse or security records.
14. Hosting and Service Providers
Bubble Maker is hosted using Cloudflare services for application infrastructure, database and storage delivery, security and request processing, and, where applicable, email sending. Where you use Pro cloud features, Cloudflare infrastructure may also store and transmit account and cloud content needed to provide the Service.
When you visit the site, Cloudflare may process standard technical information necessary to deliver and protect the website, such as:
- IP address;
- browser information;
- request metadata; and
- security-related information.
Paddle is the Merchant of Record for Bubble Maker Pro and provides payment processing and billing/subscription services.
Transactional account and operational emails are sent using Cloudflare email infrastructure. Incoming messages to support@bubblemaker.app may be received and forwarded through the email services used for that support address.
When a new Pro subscription becomes active, Bubble Maker may send an internal operational email to the operator. That notice may include limited account and subscription information such as the account email, selected plan, subscription or customer identifiers, and activation timestamp or status. It is used for business administration, subscription support, and verifying billing operations. It does not include payment card data, project content, fonts, assets, or artwork.
Because Bubble Maker uses service providers such as Cloudflare and Paddle, your information may be processed in the United States and other countries where those providers operate, subject to applicable law and provider safeguards.
These providers process information only as needed to provide their services to Bubble Maker.
15. Analytics and Tracking
Bubble Maker collects limited first-party usage information to understand how the application is used and to improve its features.
This may include aggregate events such as:
- application loads;
- types of Bubble Maker objects created;
- export format used (PNG, SVG, or PDF);
- project save and open actions;
- reference image usage;
- custom font import actions;
- bundled font usage;
- SFX preset and effect usage;
- whether an application load appears to come from a first-time or returning browser;
- a coarse referring-source category such as direct, search engine, referring platform, or an explicit source tag; and
- coarse browser and operating-system categories derived from the request.
These events are stored as daily aggregate counts. They are not stored as a log of individual people or sessions.
Product analytics do not include account email, user ID, Paddle identifiers, project IDs, style names, filenames, font names, or content hashes.
Admin Finance is an internal operator/admin view of account, subscription, and cloud-usage records. It is used for administration, support, subscription operations, and business reporting. It is not mixed into anonymous product analytics and is not used for behavioral advertising or profiling.
Bubble Maker may use existing functional browser storage to determine whether an application load appears to come from a first-time or returning browser. Bubble Maker does not create a persistent analytics identifier for this purpose, and the contents of browser storage are not transmitted as analytics data.
Analytics do not include artwork, project text, reference image contents, imported font files, full project files, file names or file paths from your device, full referring URLs, or campaign click identifiers.
Bubble Maker does not use tracking cookies, persistent visitor identifiers, device fingerprints, or cross-site behavioral tracking for this system.
A browser may store a local opt-out flag, and a matching first-party cookie, so analytics events are not sent from that browser (“Exclude This Device From Analytics”). These values are simple on/off flags. Enabling them affects future analytics from that browser only and does not delete past aggregate counts. Signing in does not override this opt-out.
Previously collected anonymous/aggregate analytics counts are not tied to account identity. They may remain after account deletion because they cannot reasonably be associated back to the deleted account.
Bubble Maker does not currently intentionally use third-party advertising trackers or behavioral advertising technology.
16. Retention
Active Pro cloud data is retained while Pro service is active and the account remains in good standing for that purpose.
After paid Pro access ends, remaining cloud data is generally retained in read-only form for 90 days so you can access and download existing cloud data. During that period, new cloud writes are generally disabled. After the retention period, that cloud content is deleted according to the retention process. Narrow exceptions may apply for legal, fraud/security, abuse, or operational reasons. We do not promise indefinite recoverability.
Account deletion uses a separate 7-day cancellation window. After that window, the account profile and active Bubble Maker cloud user content are deleted, including cloud projects, thumbnails, recovery versions, synced fonts and assets, Saved Styles, and related cloud metadata. Limited billing, accounting, fraud/security, or legally required records may be retained. Transient operational backups or logs may take a limited additional period to age out in the ordinary course.
Local browser data remains on your own device until you remove it. Signing out or deleting an account does not remotely erase local projects stored in a browser.
17. Security
Bubble Maker uses reasonable safeguards appropriate to a small creative tool, including hashed sign-in codes, hashed session tokens, origin checks, access controls for cloud objects, and restricted admin tools.
No system is completely secure, and we do not claim that data cannot be lost, accessed without authorization, or affected by failures. You should keep backup copies of important .bubblemaker project files.
18. Children’s Privacy
Bubble Maker is not directed to children under 13. Bubble Maker does not knowingly seek to collect personal information from children under 13 through accounts or support.
If you are not legally able to create an account without parent or guardian consent, you should not do so without that consent.
If a parent or guardian believes a child provided personal information to Bubble Maker, contact:
19. External Links
Bubble Maker may contain links to third-party websites or services, including Paddle checkout and billing pages.
Those third-party services operate under their own privacy policies and terms.
Bubble Maker is not responsible for the privacy practices of external websites.
20. Third-Party Fonts and Materials
Bubble Maker may include bundled third-party fonts or other materials under their respective licenses.
Use of those bundled materials does not require Bubble Maker to send your creative content to the font authors or providers.
21. Changes to This Privacy Policy
This Privacy Policy may be updated from time to time.
If significant changes are made, the version and effective date at the top of this page will be updated. Account and cloud users may be asked to accept updated Terms and this Privacy Policy before continuing those services.
22. Privacy Requests
You may contact support@bubblemaker.app to request, where applicable, access to account information, correction of account information, deletion, or information about privacy practices.
Bubble Maker may need to verify your identity before acting on a request. Your rights may vary depending on where you live.
23. Contact
Questions about this Privacy Policy may be sent to: