AnimJS Privacy Policy
Last updated: November 9, 2026
1. Who we are and scope
Spacer Nation Technologies, LLC, a Wyoming limited liability company, operates AnimJS, also called Explainer Studio, at https://animjs.com and https://studio.animjs.com. This Policy explains how we handle personal information associated with the website, studio, hosted sharing and embeds, and related communications.
Contact privacy@animjs.com or write to Spacer Nation Technologies, LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States. We are the controller of account, billing, website, and operational information for which we determine the purposes and means of processing.
When an organization submits personal information for processing on its behalf, we may act as its processor or service provider for that content. The organization’s notices and any applicable data-processing agreement govern its instructions. If your employer, school, or another customer provided your information, contact that organization first; we will assist it as required by law. This Policy is not a substitute for a required data-processing agreement.
2. Information we collect and its sources
| Category | Information and sources | Why we use it |
|---|---|---|
| Account identifiers | Email address, display name, authentication IDs, and sign-in information supplied by you or Firebase Authentication, including Google sign-in, email/password, and temporary guest sessions | Create and secure accounts, authenticate users, and provide access |
| Customer content | Prompts, uploaded PDFs and images, scripts, .json scenes, generated audio, and rendered MP4s supplied or generated through your use | Generate, edit, store, render, export, and share projects at your direction |
| Subscription and commercial information | Stripe customer ID, plan, subscription status, and associated payment communications from you or Stripe | Process subscriptions, maintain billing records, and resolve billing issues |
| Technical and usage information | Request logs, AI-credit and export-minute counters, and error reports generated by use of the Service | Operate and secure the Service, enforce usage allowances, diagnose failures, and prevent abuse |
| Analytics information | Not currently collected: Google Analytics is not enabled. If we enable it, Google Analytics interaction and device/browser information, page views and events, and cookie or similar identifiers, only after your consent | Understand use and improve the website and Service |
| Communications and preferences | Messages and attachments you send us, our replies, and marketing consent or unsubscribe preferences | Respond to requests, send account notices, and manage permitted communications |
Content you upload may contain other people’s personal information. Only provide information you are authorized to disclose and that is needed for your project. Avoid uploading highly sensitive information unless appropriate arrangements are in place. We do not require sensitive personal information for ordinary use, apart from authentication information necessary to secure an account.
Stripe handles payment details. We do not store full payment-card numbers. Information you provide directly to Stripe is also governed by Stripe’s privacy notice.
3. Purposes and legal bases
Where the GDPR or UK GDPR applies, we rely on the following bases as relevant:
- Contract: account access, requested AI generation and rendering, project storage and export, subscriptions, and necessary service communications, to the extent objectively necessary to perform our contract with you or take requested precontractual steps.
- Legitimate interests: securing and maintaining the Service, preventing fraud and abuse, handling support and business contact information, and establishing or defending claims, after considering your interests and rights. This basis does not replace consent where consent is required for cookies or marketing.
- Legal obligations: required tax and accounting records, lawful regulatory requests, and compliance with applicable obligations.
- Consent: optional analytics where required and opted-in marketing. You may withdraw consent without affecting the lawfulness of earlier processing.
If an organization is our customer, its processing instructions and lawful basis apply to content we process on its behalf. We do not use uploaded content to make solely automated decisions producing legal or similarly significant effects about individuals. AI generation produces content at users’ requests; users must review it.
Providing information needed for an account, payment, or requested processing is necessary to supply that function. You may decline optional information, analytics, or marketing without losing the core Service.
4. AI processing and training
We use Google Vertex AI, including Gemini models, to process the prompts and content necessary for requested text generation, document reading, and text-to-speech. We do not train our own models on Your Content. Under Google’s applicable standard service terms, Google does not use customer data to train or fine-tune its models without customer permission or instruction; we do not authorize such training on Your Content.
No-training commitments do not mean that a provider never retains data or that all processing is local. Google may process or retain data for applicable safety, abuse-monitoring, or other service purposes under its terms and the configuration used. We do not promise zero provider retention.
5. Cookies, Google Analytics, and choices
We use cookies or local storage for sign-in sessions and preferences such as theme. We do not currently use Google Analytics or any other optional analytics, advertising, or tracking cookies. If we enable Google Analytics in the future, it will remain separate from essential authentication and storage; it can use cookies or similar identifiers and collect information about interactions, browser/device characteristics, and approximate location derived from network information, depending on configuration.
If enabled, optional analytics will be used only after you consent through cookie choices on the website and studio, and you will be able to withdraw consent the same way. We will update this Policy before enabling it. Declining optional analytics does not prevent use of core features. Browser settings can block or delete cookies, although blocking essential storage may affect sign-in. Google’s optional Analytics opt-out browser add-on provides an additional browser-specific control; it does not replace our consent obligations.
We do not sell personal information or share it for cross-context behavioral advertising, and we do not use personal information for targeted advertising.
We honor legally applicable browser-based opt-out preference signals, including Global Privacy Control. Because our described practices do not involve sale, advertising sharing, or targeted advertising, such a signal does not change those practices. Other browser “Do Not Track” settings are not interpreted as a standardized consent choice.
6. When information is disclosed
We disclose information as needed for the purposes described here to:
- Google Cloud Platform and Firebase: hosting, authentication, Firestore database, Cloud Storage, and video rendering.
- Google Vertex AI: requested AI generation and document/audio processing.
- Stripe: payments, subscriptions, and billing administration.
- Microsoft 365: email delivery and handling of support, legal, privacy, and other correspondence.
- Google Analytics: not currently used; if enabled, usage measurement as described in Section 5.
- jsDelivr and its delivery infrastructure: font delivery when a player loads CDN-hosted fonts; requests go directly from the viewer’s browser rather than through a transfer of project files by us.
We provide vendors only the information relevant to their functions and use appropriate contractual restrictions where we engage them as processors or service providers. Some providers, including payment or sign-in providers, may act independently for their own fraud prevention, compliance, or account functions under their own notices. A font CDN is not necessarily our processor for its independent request logs.
We may disclose relevant information to professional advisers subject to confidentiality, when legally required, to establish or protect legal rights or safety, or in a genuine merger, financing, reorganization, or sale of our business subject to appropriate safeguards and applicable notice obligations. We may also disclose information at your direction, including through hosted sharing. These disclosures do not authorize unrelated advertising uses of project content.
7. Hosted sharing and self-hosted players
Hosted links and embeds deliver content through our infrastructure, so requests to view them may generate operational logs. People who receive shared content may copy or redistribute it. Removing a hosted item cannot recall copies held by others.
The self-hosted player does not itself send requests to our servers. By default it fetches fonts from jsDelivr, which receives ordinary connection information such as the requester’s IP address and browser request details. Using locally hosted fonts avoids those default CDN font requests. A website that embeds or hosts the player may have its own cookies, analytics, or privacy practices, which its operator controls. This Policy does not describe those independent practices.
8. Emails and marketing
We send transactional communications such as welcome messages, receipts or invoices, payment-failure and subscription notices, password resets, and account or security notices. Essential communications may continue while you have an account even if you decline marketing.
If we send marketing emails, we do so only after you opt in. You can withdraw consent at any time using the unsubscribe link or by contacting privacy@animjs.com. We retain the minimum information needed to honor an unsubscribe and document consent where appropriate.
9. Retention and deletion
We retain information only as long as needed for its purpose, subject to legal obligations and proportionate security or dispute-related holds.
| Information | Retention |
|---|---|
| Rendered MP4 exports | 7 days after creation on Free; 30 days after creation on paid plans |
| Projects and associated content | Until you delete the project or account, subject to limited legal retention. Original uploads and generated audio associated with a deleted project follow the same deletion process. |
| Account profile | While your account remains open, followed by deletion subject to legally necessary records |
| Deleted data in active systems | Normally within 7 days after deletion is authorized and any necessary identity verification is complete |
| Backup copies | Up to 60 days after deletion from active systems, subject to limited legal holds |
| Routine request logs and error reports | Up to 60 days after collection, except for relevant records needed for a specific security investigation or legal obligation |
| Google Analytics user/event-level data | Not currently collected. If enabled: 2 months for user/event-level data governed by the Analytics retention setting, without resetting that period on new activity. Aggregate reports that do not identify individuals may be retained longer to understand historical usage. |
| Billing, tax, renewal-consent, and accounting records | We retain tax and accounting records for 7 years after the relevant accounting year, unless a different period is legally required. Subscription-consent evidence is retained for at least 3 years after consent or 1 year after the subscription ends, whichever is longer, and longer where required by law. |
| Support messages and marketing records | Routine support correspondence: up to 24 months after resolution. Marketing consent evidence: while relied upon and for 3 years afterward, or longer where legally required. A minimal unsubscribe record is retained as long as needed to honor the opt-out. |
Backup data awaiting scheduled deletion is restricted from routine use. If a backup is restored, applicable deletion requests must be reapplied. A limited legal or security hold does not permit unrelated use; information is deleted when the reason for the hold ends. Provider retention may differ as explained in Section 4. Removing a project does not delete copies you or other people exported or independently received.
You can delete projects or your account in the app, or request deletion at privacy@animjs.com. You can export available projects as .json files. This export feature does not limit a broader statutory right to obtain your personal information.
10. Security
We use reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, loss, or misuse, appropriate to the nature of the information and risks. No service can guarantee absolute security. Protect your sign-in credentials and avoid submitting unnecessary sensitive information. We will provide incident notifications when required by applicable law.
11. International processing
We are based in the United States and host our primary application data in the western United States. A primary hosting location does not mean that all providers or personnel process information exclusively there.
Transfers subject to EEA or UK transfer restrictions require applicable safeguards, such as an adequacy decision or appropriate contractual safeguards. Contact privacy@animjs.com for information about the safeguards applicable to your information and, where available, a copy subject to necessary redactions. Use of the Service alone is not relied upon as consent to restricted transfers.
12. EEA and UK privacy rights
Where the GDPR or UK GDPR applies, you may request access to and a copy of your personal information, correction, erasure, restriction, or portability of qualifying information. You may object to processing based on legitimate interests and object at any time to direct marketing. You may withdraw consent at any time, without affecting earlier lawful processing. Rights are subject to applicable conditions and exceptions.
Email privacy@animjs.com to exercise your rights. We may reasonably verify identity and authority, using information proportionate to the request. We generally respond within one month; where legally permitted, complex or multiple requests may require up to two additional months, and we will explain the extension within the initial period. We ordinarily do not charge; any lawful exception will be explained.
You may complain to the competent data-protection authority, including the authority where you habitually reside, work, or believe an infringement occurred, or the UK Information Commissioner’s Office. You do not need to contact us first.
13. California and other U.S. state privacy rights
Where applicable state law covers our processing, residents may have rights to know and access personal information, obtain a portable copy, correct inaccuracies, delete information, and opt out of sale, targeted advertising, or certain consequential profiling. California residents may also have the right to limit certain uses of sensitive personal information and receive information about categories collected, their sources, purposes, and disclosures. We do not discriminate or retaliate against you for exercising applicable rights.
The categories in Section 2 correspond, as applicable, to identifiers, customer-record information, commercial information, internet or network activity, and audio, visual, or other content. Uploaded content can also contain sensitive or protected information; we do not solicit it to infer characteristics about you. Sources and purposes are in Sections 2 and 3, recipients in Section 6, and retention in Section 9.
We do not sell personal information or share it for cross-context behavioral advertising, including information about people under 16, and do not use it for targeted advertising. We do not use sensitive personal information to infer characteristics about you or for purposes that require offering a right to limit under California law.
Submit requests to privacy@animjs.com or through available in-app deletion controls. An authorized agent may submit a request with evidence of authority; we may verify your identity directly where permitted. We will not require unnecessary sensitive information for verification. We explain any denial and applicable appeal rights. Where a right of appeal applies, email privacy@animjs.com with “Privacy Appeal” and the request reference; we will review and respond within the applicable statutory period and identify further complaint options if denied.
For California requests, we acknowledge receipt within 10 business days and ordinarily respond within 45 calendar days; a legally permitted extension of up to 45 additional days will be explained during the initial period. Other states’ deadlines may differ and will be followed.
14. Young users
The Service is intended for users at least 16 years old, or the higher local minimum, and is not directed to children under 13. Users below the age of majority need the parental or guardian acceptance described in our Terms. We do not knowingly collect personal information from children under 13. If you believe a child provided information contrary to these requirements, contact privacy@animjs.com so we can investigate and take appropriate action, including deletion where required.
The educational nature of the Service does not mean it is designed to collect student records or authorize schools to upload children’s information without an appropriate legal basis and contractual arrangements.
15. Changes and contact
We will post changes here and update the date. For material changes, we will give prominent in-app or email notice before they take effect where required. We will obtain consent if a change requires it and will not treat continued use alone as consent to a materially different use that legally requires affirmative consent.
Privacy requests: privacy@animjs.com. Legal matters: legal@animjs.com. General questions: hello@animjs.com.
Mail: Spacer Nation Technologies, LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States.