Privacy Policy

Last updated: August 14, 2026

What we collect

Account data: email, name, and (with Google sign-in) your Google profile name and avatar. Passwords are stored as bcrypt hashes.
Usage data: the domains and instructions you submit, builds you run, and credits you use.
Technical data: IP address at signup (used to prevent free-credit abuse) and standard server logs.

How we use it

To run the service: generating your sites (your inputs are sent to AI providers — OpenAI, Anthropic, and xAI — solely to produce your builds), managing your account and credits, emailing you about your builds and account (via Resend), and processing payments (via Stripe — we never see your card number).

What we don't do

We don't sell your data. We don't use your inputs to train models. Redesign mode reads only the publicly visible pages of the site you point it at.

Cookies

One session cookie keeps you logged in. No third-party ad trackers.

Your rights

You can delete your generated sites from your dashboard anytime. To delete your account and its data, email magic@domainmagic.com and we'll handle it promptly.