Privacy policy
Last updated: 29/07/2026
Hang on — YOU'RE worried about privacy?
You use free email from megacorps who read every word, park your life on servers overseas, and click "Accept all cookies" like it's confetti. Now you're grilling ME? Fine. Here's exactly what I keep, why, and how you can tell me to sling my hook.
Grumble Gary is based in Aotearoa, New Zealand. We handle personal information in line with the New Zealand Privacy Act 2020 and the twelve Information Privacy Principles (IPPs). Where a visitor is protected by the European Union's General Data Protection Regulation (GDPR), we handle personal data in a manner consistent with GDPR adequacy expectations.
1. What we collect
- Account email address when you sign in.
- Prompts, generated slogans, and generated images you create with the app.
- Purchase records (pack purchased, credits granted, Stripe customer ID and receipt URL) when you buy credits. Card details never touch our servers — they are handled entirely by Stripe.
- Blog submissions (author name or "Anonymous", title, content, IP address, user agent) when you submit a community blog post for review.
- Basic technical logs (IP address, user agent) for security and debugging.
- Cookie preferences you set in the consent modal.
2. Why we collect it
- To operate the account and content-generation features (IPP 1: purpose).
- To keep the service secure and to prevent abuse.
- To improve the site through anonymised, aggregated analytics — only if you opt in.
3. Cookies and trackers
Strictly necessary cookies (auth, security, cookie preferences) are always on. Analytics and marketing cookies are off by default and only load if you accept them in the cookie consent modal. You can change your choice at any time from the "Cookie preferences" link in the footer.
Google AdSense & Third-Party Advertising: We partner with Google AdSense to serve advertisements on our site. Google, as a third-party vendor, uses cookies to serve ads to visitors. Google's use of advertising cookies enables it and its partners to serve ads based on your visits to our site and/or other sites on the Internet.
You may opt out of personalized advertising by visiting Google Ad Settings. Alternatively, you can opt out of third-party vendors' use of cookies for personalized advertising by visiting www.aboutads.info.
4. Sharing
We do not sell your personal information. We share it only with the infrastructure providers required to run the service, under confidentiality obligations and where required by law:
- Lovable Cloud / Supabase — hosting, database, authentication.
- Lovable AI Gateway — routes prompts to model providers to generate rants and images.
- Stripe, Inc. — payment processing, tax calculation, and receipts for credit purchases.
- Cloudflare — CDN and DDoS protection.
- Google LLC (Google AdSense) — ad delivery, performance tracking, and ad personalization.
5. Retention
We keep account data for as long as your account is active. You may request deletion at any time (see "Your rights" below); deletion happens within a reasonable period unless we are required to retain the data for legal reasons.
6. Your rights
Under the NZ Privacy Act 2020 and, where applicable, the GDPR, you may:
- Request a copy of the personal information we hold about you.
- Ask us to correct information that is wrong or out of date.
- Ask us to delete your account and associated content.
- Withdraw your cookie consent at any time.
7. Cross-border storage
Data may be processed on servers outside New Zealand. Where GDPR applies, we rely on providers that meet GDPR adequacy or use standard contractual clauses.
8. Complaints
If you believe we have mishandled your information, contact us first. In New Zealand you may also contact the Office of the Privacy Commissioner (privacy.org.nz). In the EU you may contact your local Data Protection Authority.
9. Contact
Privacy requests and questions: privacy@grumblegary.com.