Privacy Policy
Effective September 11, 2026 · Deaf Pumpkin Studios, LLC
This Privacy Policy explains how Deaf Pumpkin Studios, LLC (“we,” “us,” or “our”) collects, uses, retains, and shares information when you use the LayerOP website at layerop.cc, the desktop application, and related services (the “Service”).
We built LayerOP for gamers who want help understanding what they're playing — not for surveillance. If something here is unclear, email us at privacy@layerop.cc.
1. Who is responsible for your data
Data controller: Deaf Pumpkin Studios, LLC, incorporated in Delaware, registered address: 2810 North Church Street, PMB 80252, Wilmington, DE 19802, USA.
Privacy contact: privacy@layerop.cc
2. Information we collect
Account information
When you create an account, we collect:
- Email address
- Password (stored as a cryptographic hash — we never store plain-text passwords)
- Display name (username)
- Email verification status
- Subscription plan and billing status
Device information
When you link a device to your account, we store:
- Device identifier and name you choose
- API credentials (stored securely; we do not store raw API keys in plain text)
- Pairing and last-seen timestamps
- Daily usage counts for quota enforcement
Messages, questions, and images
When you use the KNOW feature, we collect and store:
- Messages — the text of your questions and any conversation context you send with a request
- Images — screenshots of your game screen, including frames captured for game identification and screenshots you optionally attach to a question on the Overpowered plan
- Game context associated with a request (such as detected game title)
- Generated answers returned to you
We retain messages and images on our servers for up to 1 year (365 days) from the date they are collected. After that period, they are deleted or anonymized so they can no longer be linked to you or your account. Answers may also be cached briefly in memory to improve performance; that cache is not kept long-term.
The desktop app may keep a short local conversation history on your device for follow-up questions. That local copy is separate from server retention and stays on your machine unless you send it to us as part of a request.
Technical and log data
We automatically collect certain technical information when you use the Service, including:
- IP address
- Request timestamps and API endpoints accessed
- Device and plan identifiers associated with API requests
- Browser or client metadata needed to operate and secure the Service
- Error, audit, and security logs
We retain server logs for up to 1 year (365 days), unless a longer period is required for an active security investigation, fraud prevention, or legal compliance. When that longer period ends, we delete or anonymize the logs.
Payment information
Paid subscriptions are processed by Stripe. We receive billing status, Stripe customer and subscription identifiers, and related metadata from Stripe. We do not store full payment card numbers on our servers.
Website session
When you sign in on layerop.cc, we set an essential session cookie to keep you logged in. See our Cookie Policy for details. Session cookies are not the same as the retention periods described above for messages, images, or server logs.
3. What we do not collect
We do not collect:
- Your personal files, installed programs, or running processes
- Microphone or webcam data
- Keyboard input outside of what you type into LayerOP
- In-game actions, inventory, chat, or game memory
- Advertising profiles or cross-site tracking data
4. How we use information
We use the information above to:
- Provide, operate, and maintain the Service
- Authenticate accounts and linked devices
- Process subscriptions and enforce plan limits
- Generate answers to your gaming questions using AI and, when needed, web search
- Detect abuse, enforce our Terms, and protect the Service
- Investigate errors, security incidents, and support requests
- Send transactional emails (such as verification and billing notices)
- Comply with legal obligations and respond to lawful requests
We do not sell your personal information.
5. Why we retain data for up to one year
We limit retention to what we reasonably need. Messages, images, and server logs are kept for up to 1 year because that period helps us:
- Operate the Service and handle support or billing questions tied to your use
- Detect abuse, fraud, and violations of our Terms
- Maintain security, troubleshoot incidents, and improve reliability
- Meet legal, tax, and regulatory obligations where applicable
- Establish, exercise, or defend legal claims if necessary
When those purposes no longer require the data, we delete or anonymize it within the retention periods above.
6. AI and third-party processors
To answer questions and identify games, we send relevant content (including message text and images when applicable) to third-party AI providers such as OpenAI, Anthropic, and others. We may also use web search infrastructure and payment, email, and hosting providers.
These providers process data on our behalf under contractual terms. Their own retention practices may differ from ours and are governed by their policies. Because providers may be located in the United States or other countries, your information may be transferred internationally. Where required by law, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.
7. Local data on your device
The desktop app stores some data locally on your computer, including short-term conversation history for context and authentication tokens. This data stays on your device unless you send it to our servers as part of a request. You can clear local app data by uninstalling the application or using in-app options where available.
8. Legal bases (EEA, UK, and Switzerland)
If you are in the European Economic Area, the United Kingdom, or Switzerland, we process personal data based on:
- Contract — to provide the Service you signed up for, including answering your questions and managing your account
- Legitimate interests — security, abuse prevention, fraud detection, service reliability, and retaining limited records for the periods described in this policy, balanced against your rights
- Legal obligation — where required by law, including tax and accounting rules
- Consent — where we ask for it explicitly (such as non-essential cookies, if we add them in the future)
9. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data
- Restrict or object to certain processing
- Data portability
- Withdraw consent where processing is consent-based
- Lodge a complaint with a supervisory authority
Account and data deletion: Email privacy@layerop.cc from the address associated with your account and ask us to delete it. We will verify your request and delete your account data, stored messages, images, and associated logs where we are not required by law to keep them. Deletion is typically completed within a reasonable timeframe and, where applicable, within 30 days of verifying your request.
Brazil (LGPD): Brazilian users may exercise rights under the Lei Geral de Proteção de Dados by contacting privacy@layerop.cc. You may also contact Brazil's National Data Protection Authority (ANPD).
California (CCPA/CPRA): California residents may have additional rights to know, delete, and correct personal information, and to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising.
10. Children
The Service is not directed to anyone under 16 years of age, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us and we will delete it.
11. Security
We use technical and organizational measures designed to protect your information, including encryption in transit (HTTPS), hashed passwords, access controls, and retention limits. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
12. Data retention summary
| Data type | Retention |
|---|---|
| Account data | Until you delete your account, plus a short period for backups and legal obligations |
| Messages and images (questions, screenshots, answers) | Up to 1 year (365 days) |
| Server logs (IP address, timestamps, etc.) | Up to 1 year (365 days), unless a longer period is required for security or legal compliance |
| Billing records | As required for tax and accounting obligations |
| Website session cookie | Up to 30 days, or until you log out — see Cookie Policy |
13. Changes
We may update this Privacy Policy from time to time. Material changes will be posted on layerop.cc with an updated effective date. If we materially reduce how long we keep personal data, the new period applies to data collected after the change unless law requires otherwise.
14. Contact
Privacy questions and requests: privacy@layerop.cc
General support: hello@layerop.cc