Privacy Policy

InstaSpawn is made by Warhelm Games, LLC, a Texas limited liability company ("we", "us"). This policy covers instaspawn.com, our Roblox Studio plugins and other tools, and the services behind them (together, the "Services"). You can create an account on our website, but you don't need one to buy or use the Services.

What we collect and why

• Your InstaSpawn account(needed to buy a plan). Your email address, your password stored only as a salted hash (we never store or see the password itself), which version of our Terms and this policy you agreed to and when, and for each browser you're signed in on a random session ID (kept only in scrambled form), when it started and when it was last used. We don't keep IP addresses with it. We use your email to sign you in, to confirm the address is yours, and to send the account emails below. Your account shows the plans you buy with it, and any bought with its email address.
• Account emails. We email you to confirm your address, to reset your password or sign you in with a link when you ask, and to tell you when your email or password changes. These links work once and expire: confirming in 24 hours, a password reset in 1 hour, a sign-in link in 15 minutes. We keep only a scrambled form of each link and delete it a day after it expires.
• Your Roblox account, when you use a paid plan.When you turn on a plan with your code, our plugin sends the Roblox user ID, username and display name of the account you're signed into in Roblox Studio, and a random ID the plugin makes for that computer. It sends them again each time it checks your plan. We keep them with your code to run your plan: to keep it on one Roblox account, count the computers using it and notice a code being shared. We don't get your password or email from Roblox.
• Agreeing to the Terms. When you confirm a plan in the plugin, we record which version of our Terms you agreed to and when, so we can show what you agreed to.
• Purchases.You buy a plan signed into your InstaSpawn account. Creem sells our paid plans as merchant of record. It tells us what you bought, its status and the email you gave at checkout (your account's, filled in for you). We give Creem only internal account numbers, so it can tell us which account a purchase belongs to, never your Roblox ID or username. We use your email for messages about your purchase, never for marketing. Creem handles payment details under its own privacy policy, and we never see your card. If you buy through another platform, such as with Robux on Roblox, that platform tells us what you bought.
• Content you send for processing.Some features send what you're working on, such as a 3D model, an image or a prompt, to our servers so we can process it or generate from it and return the result. Content is kept only while you work: it's removed after a short time idle, usually within a few hours, unless a feature saves it for you at your request, in which case it's kept until you delete it. We don't look at it except to fix a problem you report, prevent abuse or follow the law. We don't share it beyond the providers below, don't use it to train AI models, and don't use images to identify anyone.
• Anonymous usage counts.Our tools count what happens in them (for example: opened, exported, failed), with the tool's version, timings and whether a paid plan is on. The counts carry nothing that identifies you or your device. We use them to keep the Services running and fix problems. Individual events are deleted after 90 days. Only daily totals are kept after that.
• IP addresses.Our servers see the IP address of each request. Our services hold it in memory only, to apply fair-use limits and to stop repeated guessing of codes, and forget it within 24 hours of your last request. While Pro is in use, they also note which network each request comes from, as a scrambled id and never the address itself, to count how many computers are using a plan at once; that is forgotten within 2 hours. They don't write addresses to disk or to their logs. Our web server's error logs can include it when a connection fails, and are kept only as long as we need them to run and secure the Services. Our network provider also handles it to deliver requests and block attacks.
• Feedback.Messages you send with the feedback form on our Help page, and which page you sent them from, or with "Send feedback" in our plugin, with the plugin's version and whether a paid plan was on. In the plugin you can add an email address if you'd like a reply; we use it only to answer you. Feedback isn't linked to your name or Roblox account. We keep it while it helps us improve the Services.
• Why you canceled.If you cancel a plan and choose to tell us why, we keep the reason and any note you write with that plan's record. Both are optional.
• Emails you send us. We keep them as long as we need to deal with your request.

We don't sell or share your personal information, show you ads, or track you across other sites or apps.

Who else handles it

• Creem (payments), independently under its own privacy policy.
• Discord, for our community: our Help page shows Discord's widget for our server, served by Discord, and our home page asks Discord for the server's invite link. Discord sees those visits under its own privacy policy.
• Providers that work on our instructions: hosting, network and security, and email.
• AI providers, for AI features only: when you use one, your input goes to the provider that runs it.
• Others only if the law requires it, to protect people's rights or safety, or to a successor if the business is sold, in which case this policy still applies.

Our servers are in the United States.

How long we keep it

• Your InstaSpawn account: until you delete it. Delete my account on your account page removes your email, password hash and sessions at once, ends the plans on it and deletes their Roblox account details. An account whose email is never confirmed is deleted after 7 days. A session ends when you sign out, change your password elsewhere, or after 30 days without a visit.
• Your Roblox account details, computers and Terms record: until you delete them. Deleting your InstaSpawn account removes them at once. A request by email is done within 30 days. Copies in our backups expire on their normal schedule after that.
• Which computers used a plan on which day: 30 days.
• How many computers used a plan at once, per day (counts only, no addresses): 60 days.
• Refunded or disputed payments: we keep your Roblox user ID and a record of the refund or dispute for up to 3 years, to prevent abuse, even if you delete your account.
• Accounting records: as long as the law requires.
• IP addresses: in memory only, forgotten within 24 hours of your last request.
• Content and logs: as described above.

Cookies

Our website sets one cookie, and only when you sign in: a strictly necessary cookie that keeps you signed in, for up to 30 days after your last visit or until you sign out. It sets no other cookies. Our network provider may set a security cookie to block bots. The Discord widget on our Help page is Discord's own and may use Discord's cookies. There are no analytics or advertising cookies. We don't track you across sites, so browser "Do Not Track" signals don't change anything.

Children

The Services are for people 13 and over, and only adults can buy a plan. We don't knowingly collect personal information from children under 13. If you believe we have, email us and we'll delete it.

Your choices and rights

• On your account page: change your email or password, sign out other devices, cancel a subscription, or delete your account and its data.
• Email privacy@instaspawn.comfor a copy of your data, to correct it, to have it deleted, or to object to how we use it. We confirm it's you by writing back to your account's email.
• If you're in the EU or UK: we use your information to provide the Services you asked for (our contract with you), and to keep them secure and working (our legitimate interests). Your information is handled in the United States. You can complain to your local data protection authority.
• We honor any other rights your local law gives you.

Security

We use reasonable safeguards, such as encrypted connections and limited access, but no system is perfectly secure. If a breach affects your information, we'll notify you as the law requires.

Changes

We'll post changes here and update the date. For significant changes we'll also give notice in our tools or on the website before they take effect.

Contact

Warhelm Games, LLC · privacy@instaspawn.com