Privacy

Privacy Policy

Last updated: September 1, 2026

This Privacy Policy explains how SparkShift Ltd. ("we," "us," or "our"), the operator of LustMaker, collects, uses, shares, and protects personal information when you use www.lustmaker.com and related services (the "Service").

1. Information we collect

Account and profile information

We may collect an account identifier, email address, authentication-provider identifiers, display preferences, language, age or eligibility confirmations, account status, and support history.

Content and creative activity

We process prompts, character drafts and settings, chats, uploaded source files, generated images or videos, saved media, visibility choices, and related metadata. If you request public visibility, we also process the submitted version, policy acceptance, review status, reviewer decision, and publication history.

Payments and credits

We collect product and credit information, amount, currency, order and transaction identifiers, payment status, timestamps, refund or dispute information, and limited billing or contact data a payment provider sends us. Card details entered into a provider-hosted checkout are handled by that provider. We do not ask you to send us a full payment-card number or card security code.

Usage, device, and technical information

We may collect IP address, approximate location derived from IP, browser and device type, operating system, referring page, pages and features used, timestamps, language, cookie or session identifiers, diagnostic events, and security logs.

Reports, takedowns, and communications

If you contact us or submit a complaint, we collect the information you provide, such as contact details, content URLs, allegations, supporting files, rights or consent evidence, correspondence, and resolution history. Please provide only information relevant to the request.

2. How we use information

We use information to:

• create and authenticate accounts and maintain sessions;
• provide AI chat, character, image, video, storage, and personalization features;
• calculate, deliver, and account for credits and purchases;
• review content submitted for public visibility and operate reports, takedowns, and appeals;
• detect abuse, investigate incidents, enforce our Terms and Content Policy, and protect people, rights, and the Service;
• provide customer, billing, and technical support;
• debug, measure, and maintain performance, reliability, and safety;
• comply with legal, payment-network, accounting, and regulatory obligations; and
• send service messages and, where permitted, marketing communications you can opt out of.

3. Legal bases where required

Where data-protection law requires a legal basis, we rely as appropriate on performing our contract with you, our legitimate interests in operating and securing the Service, your consent, and compliance with legal obligations. You may withdraw consent at any time where processing is based on consent, without affecting earlier lawful processing.

4. How we share information

We do not sell your personal information for money. Some privacy laws may define certain analytics disclosures as “sharing” even when no money is paid; where those laws apply, you may contact us to exercise an applicable opt-out right. We may disclose information to:

• service providers supporting hosting, storage, content delivery, authentication, customer support, communications, analytics, fraud prevention, security, and AI processing;
• payment providers, including Verotel where offered, to initiate, confirm, reconcile, refund, or investigate transactions;
• professional advisers and authorities when reasonably necessary to comply with law, respond to valid process, prevent harm, or protect rights;
• a successor organization in a merger, financing, reorganization, sale, or transfer, subject to appropriate safeguards; and
• other parties at your direction or with your consent.

AI and infrastructure providers may process prompt, content, and technical data to return requested results or operate the Service. Their own safeguards may reject certain requests.

5. Public and private content

Private characters and drafts are not intentionally displayed in public character listings. They still may be processed by our systems and vendors to provide the feature, and accessed by authorized personnel where reasonably necessary for support, security, a report, policy enforcement, or law.

Content submitted for public visibility remains non-public while pending review unless an earlier approved version already exists. Once approved and public, profile and character information, media, and related metadata may be viewed, copied, indexed, or shared by others. Making content private or removing it does not guarantee deletion of copies others already made.

6. Cookies and similar technologies

We use cookies, local storage, and similar technologies for sign-in, security, language and preference storage, Service operation, diagnostics, and measurement. When a Google Analytics measurement ID is configured, Google Analytics loads after a user interaction or a brief delay and may receive device, page, interaction, and approximate-location information under Google's own terms. You can control or block these technologies through your browser, but blocking necessary storage may prevent sign-in or other features.

7. Retention

We retain account information, chats, drafts, and saved generated media while needed to provide the account or until they are deleted through an available control, subject to the exceptions below. Transaction and refund records are kept for applicable accounting, tax, fraud, dispute, and payment-provider periods. Public-review and complaint records are kept for policy enforcement, repeat-violation controls, payment-network reporting, safety, and legal claims. Technical logs are retained for the period reasonably needed to diagnose incidents and secure the Service.

Deletion may be delayed for backups, fraud prevention, unresolved complaints, legal holds, or records we must retain. We may retain de-identified or aggregated information that cannot reasonably identify you.

8. Security

We use administrative, technical, and organizational safeguards designed to protect information. No online service is completely secure. Use a unique password, protect access to your email and device, and contact us if you suspect unauthorized activity.

9. International processing

The Service and its providers may process information in countries other than where you live. Those countries may have different data-protection laws. Where required, we use appropriate legal mechanisms and safeguards for international transfers.

10. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or obtain a portable copy of personal information, withdraw consent, or complain to a data-protection authority. You may also opt out of marketing messages using their unsubscribe method.

To make a privacy request, contact lustmakerteam@gmail.com with the subject “Privacy Request.” We may verify that you control the relevant account and may retain information where law permits or requires. Authorized-agent requests must include proof of authority.

11. Children

The Service is not directed to children or anyone under 18. We do not knowingly allow a minor to use the Service. If you believe a minor has provided personal information or is depicted in content, use the report form or contact us immediately so we can investigate.

12. Third-party services

Third-party sites and hosted payment pages have their own privacy practices. This Policy does not control information a third party collects directly under its own terms. Review the notice shown by that provider before submitting information.

13. Changes and contact

We may update this Policy as our practices or legal requirements change. We will post the updated date and give additional notice where required.

SparkShift Ltd. is the operator responsible for LustMaker. For privacy questions or requests, see Contact & Billing Support or email lustmakerteam@gmail.com. Do not send passwords, full card details, or unnecessary identity documents by email.