Privacy Policy

Last updated: 2026-08-07

中文版

1. Introduction

MotionSites ("we", "us", "the Platform") runs a marketplace of ready-to-use AI website prompts. This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, and what control you have over it.

It applies to motionsites.dev and every service reachable from it. By using the Platform you accept the practices described here.

2. Information We Collect

2.1 Information You Give Us

WhatWhenWhy
Email addressSign-up, newsletter, supportAccount identity, transactional email
Password hashEmail sign-upAuthentication (we never store the plaintext)
Display name and avatarProfile editing, third-party sign-inShowing who you are in the interface
Payout detailsCreator withdrawal requestPaying out creator earnings
Prompt listings, previews, descriptionsPublishing as a creatorDisplaying your products
Support messages and feedbackWhen you contact usAnswering you, improving the product

If you sign in with a third-party provider such as GitHub, we receive the basic profile fields that provider shares — typically your email, username and avatar. We do not receive your password there.

2.2 Information We Collect Automatically

  • Account activity: purchases, unlocked prompts, membership status, redemption codes used.
  • Device and connection data: IP address, browser type, operating system, referring page, language preference.
  • Approximate location: derived from your IP address at country level. We use it to decide whether to serve assets from our overseas CDN or our mainland-China CDN, and which currency and payment channels to show.
  • Diagnostics: error reports and performance traces when something breaks.

2.3 Payment Information

Card numbers, CVV codes and payment-app credentials never reach our servers. Stripe, WeChat Pay and Alipay process them directly. We store only the outcome: an order record, the amount, the currency, the channel, and the provider's transaction reference.

3. How We Use Your Information

  • Create and secure your account, and keep you signed in.
  • Deliver what you bought: unlock prompt content, activate membership, apply redemption codes.
  • Send transactional email — verification codes, password resets, receipts, payment-failure alerts, refund notices.
  • Send marketing email, only if you subscribed. Every such email has an unsubscribe link.
  • Prevent fraud, abuse, chargeback rings and automated scraping.
  • Calculate creator earnings and process withdrawals.
  • Understand aggregate usage so we can improve the catalogue and the interface.
  • Meet legal, tax and accounting obligations.

We do not sell your personal information, and we do not use your account data to train AI models.

Where GDPR applies, we rely on:

  • Contract — to provide the account, purchases and membership you asked for.
  • Legitimate interests — security, fraud prevention, service improvement, and analytics that do not identify you individually.
  • Consent — marketing email and any optional cookies. You can withdraw consent at any time.
  • Legal obligation — tax records and lawful requests.

5. Who We Share With

We share only what a provider needs to do its job:

ProviderPurpose
Stripe, WeChat Pay, AlipayPayment processing
Email delivery provider (Resend or our SMTP relay)Transactional and newsletter email
Cloudflare R2 and Alibaba Cloud OSSStoring and serving preview images and video
Cloudflare TurnstileBot protection on sign-in and sign-up
Error monitoring (Sentry)Diagnosing crashes
Privacy-friendly web analyticsAggregate traffic statistics
Redis cache providerRate limiting and session caching

We also disclose information where the law requires it, to enforce our Terms, or to protect the rights and safety of users and the Platform. If the business is ever sold or merged, account data may transfer to the acquirer under this same policy.

6. Storage, Location and Retention

Preview media is stored in Cloudflare R2 and mirrored to Alibaba Cloud OSS so that visitors in mainland China and visitors elsewhere both get a fast, reachable copy. Account and order data is stored in our managed PostgreSQL database.

This means your information may be processed in a country other than your own. Where we transfer data out of the EEA or the UK, we rely on standard contractual clauses or an equivalent safeguard.

We keep:

  • Account data for as long as your account exists;
  • Order and tax records for the period required by accounting law, typically several years, even after account deletion;
  • Diagnostic logs for a short rolling window;
  • Marketing subscriptions until you unsubscribe.

7. Security

We use HTTPS everywhere, hash passwords, restrict administrative access to named staff, apply rate limits and bot challenges on authentication routes, and keep payment credentials out of our systems entirely.

No system is perfectly secure. If a breach affects your personal information, we will notify you and the relevant authority as required by law.

8. Your Rights

Depending on where you live, you may have the right to:

  • access the personal information we hold about you;
  • correct anything inaccurate — most fields are editable in your dashboard;
  • delete your account and associated personal data;
  • export your data in a portable format;
  • object to or restrict certain processing;
  • withdraw consent for marketing at any time;
  • complain to your local data protection authority.

To exercise a right that is not self-service, email us from the address on your account. We respond within 30 days.

9. Cookies and Similar Technologies

Essential cookies

Required for the site to work — session and authentication cookies, language preference, security and anti-abuse tokens, and the cookie-consent record itself. These cannot be switched off.

Optional cookies

Analytics and attribution cookies that help us understand which pages and prompts people find useful. Where consent is required, these are set only after you accept, and you can change your choice at any time using the controls below.

You can also block or delete cookies in your browser. Blocking essential cookies will break sign-in.

10. Children

The Platform is not intended for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us personal information, contact us and we will delete it.

11. Third-Party AI Tools

Prompts you buy here are pasted into third-party AI builders. Anything you type into those tools is governed by their privacy policies, not ours. We never see what you paste or generate there.

12. Changes to This Policy

We may update this policy as the product and the law evolve. The "Last updated" date at the top of the page reflects the current version. Material changes will be announced on the Platform or by email.

13. Contact

For privacy questions or data requests, use the contact channels in the site footer, or email the address shown on the site. We aim to reply within five business days.