Privacy Policy

Last updated: May 2, 2026

Makenot.work is operated by Make Creative, LLC. This policy explains what data we collect and how we use it.

The Short Version

We collect the minimum data needed to operate
We don’t track you across the web
We don’t sell your data
We don’t show ads
You can export or delete your data anytime

What We Collect

Account Information

Email address
Username
Password (hashed, we can’t read it)
Payment information (handled by our payment processor, we don’t store card numbers)

Content

Files you upload
Metadata you provide (titles, descriptions, tags)
Projects and organization

Transactions

Purchases and memberships
Payment amounts and dates
Payout records

Technical Data

IP address (for security, rate limiting)
Browser type (for compatibility)
Error logs (for debugging)

IP addresses are retained for 30 days, then deleted.

Login and Session Data

IP address and browser type per session (for security alerts and session management)
Failed login attempt counts and timestamps (for account lockout protection)

Session records are retained for 90 days after the session ends. Failed login data is reset after a successful login.

What We Don’t Collect

Browsing behavior or history
Location data (beyond IP-derived country for tax purposes)
Cross-site tracking or device fingerprinting for identification
Third-party tracking data
Social media profiles

How We Use Data

Operating the service: Hosting content, processing payments
Communication: Account notifications, support responses
Security: Detecting abuse, preventing fraud
Legal compliance: Tax reporting, responding to valid legal requests

Data Sharing

We share data only with:

Payment processor: Payment processing (see Infrastructure & Vendors for current provider)
Infrastructure providers: Hosting, CDN (they process but don’t access your data)
Legal authorities: Only when legally required, and we’ll notify you unless prohibited

We don’t sell or share data for advertising.

Your Rights

Access

Download all your data anytime from Settings > Export.

Correction

Edit your account information directly.

Deletion

Delete your account from Settings > Account > Delete. We remove your personal data within 30 days, except:

Transaction records (legal requirement)
If you have completed sales, purchased content remains accessible to buyers for 90 days after deletion, then is removed

Portability

Export includes all content, metadata, and transaction history in standard formats.

Cookies

We use cookies for:

Session management: Keeping you logged in
Security: Preventing unauthorized actions on your account

We don’t use tracking cookies or third-party cookies.

Children

We don’t knowingly collect data from children under 13.

International Transfers

Data is processed in the United States and Germany (application server hosted by Hetzner in Germany; object storage and backups in the US).

For transfers of personal data from the EU/EEA to the United States, we rely on Standard Contractual Clauses (SCCs) as approved by the European Commission. Copies of our SCCs are available upon request at privacy@makenot.work.

We also maintain data processing agreements with our infrastructure providers that include SCC commitments for any EU personal data they process on our behalf.

GDPR (EU Users)

You have rights under GDPR including access, rectification, erasure, and portability. Contact privacy@makenot.work to exercise these rights.

Legal basis for processing: contract performance (operating your account), legitimate interest (security), legal obligation (tax records).

We respond to data subject requests within 30 days.

CCPA (California Users)

You have the right to know what data we collect, request deletion, and opt out of data sales (we don’t sell data, so there’s nothing to opt out of).

Changes

We’ll notify you of material changes via email.

Contact

Privacy questions: privacy@makenot.work

Data protection inquiries: dpo@makenot.work