Privacy Policy
Last updated: 29 July 2026
1. Who we are
This policy covers the Ants website and the account, feedback and preview features available on it. Ants is operated by Core Engine IT Infrastructure LLC, a company registered in United Arab Emirates at Al Souq Al Kabeer, R118, 201-A-19, Dubai, United Arab Emirates (registration number 2647230, licence number 1526216). We are the controller of the personal information described here.
For any privacy question or request, write to [email protected]. We answer within 30 days.
2. What we collect
Information you give us
- Account data — your email address and the sign-in method you choose: a password, a one-time code sent to your email, a passkey registered on your device, or a Google or Apple account.
- Content you submit — anything you type into the site, and any images you upload.
- Feedback and support messages — your message and the email address you give us so we can reply.
Information we collect automatically
- Usage data — pages viewed, features used, and the events described in section 5, collected only where you have allowed analytics cookies.
- Device and connection data — IP address, browser and device type, and the approximate country we derive from your IP in order to apply the right consent defaults for your region.
- Server logs — request metadata and timestamps, kept for security and debugging.
What we do not collect
We do not collect payment card details — the site does not take payment. We do not buy personal data from data brokers, we do not ask for special-category data such as health, biometric, religious or political information, and we do not record your voice: dictation uses your browser's own speech recognition, described in section 4. Please do not submit special-category data through the site.
3. How we use it
- To create and secure your account and sign you in.
- To store and display the content and images you submit.
- To answer your feedback and support messages.
- To keep the site secure — detecting abuse and attacks, and enforcing our Terms of Service.
- To send service notices about security and changes to these documents.
- With your consent, to measure how the site is used and to measure and personalise advertising.
- To comply with legal, tax and accounting obligations.
Artificial intelligence
We do not currently send anything you submit to an AI model provider. The interactive builder shown on this site is a scripted preview, not a live model, and no prompt or upload leaves our infrastructure for the purpose of generating output. We do not use your content to train AI models, our own or anyone else's, and we do not sell it. If that changes we will update this policy and tell you before the change takes effect, as described in section 12.
4. Voice input
The dictation button uses the Web Speech API built into your browser. We do not receive or store the audio — we receive only the text your browser returns. Be aware that Chrome and Safari perform recognition on Google's and Apple's servers respectively, so using dictation sends your audio to your browser vendor under its own privacy policy, not ours. Type instead if you would rather not.
5. Cookies and similar technologies
Strictly necessary cookies and local storage are set without consent because the site cannot work without them. Analytics and advertising cookies are set only after you allow them in our consent banner; until then, Google Consent Mode keeps analytics, ad storage, ad personalisation and ad user data denied. You can change or withdraw your choice at any time using the cookie settings button in the banner, and you can block or delete cookies in your browser settings.
| Name | Type | Purpose | Duration | How to opt out |
|---|---|---|---|---|
| Session and token storage | Necessary | Keeps you signed in | Session to 30 days | Sign out, or clear site data in your browser |
| Consent choice | Necessary | Remembers whether you allowed analytics and advertising | 12 months | Required to honour your choice; clear site data to reset |
| Language preference | Necessary | Remembers the locale you selected | Until cleared | Clear site data in your browser |
_ga, _ga_* |
Analytics | Google Analytics 4 — distinguishes visitors and sessions to measure traffic | Up to 24 months | Deny analytics in our banner, or install Google's opt-out add-on |
_gcl_au |
Advertising | Google Ads conversion linker — attributes sign-ups to a campaign | 90 days | Deny advertising in our banner |
IDE, test_cookie |
Advertising | Set by Google on doubleclick.net to measure and personalise ads | Up to 13 months | Deny advertising in our banner, or use Google's ad settings |
Google Tag Manager itself sets no cookies; it loads the tags above.
6. Who we share it with
We do not sell your personal information. We share it with the following processors, each under a contract limiting them to our instructions:
| Provider | What it does | Privacy policy |
|---|---|---|
| Cloudflare | Hosts and delivers the website; DNS and protection against attacks | cloudflare.com |
| DigitalOcean | Hosts our application servers and database, where accounts and submitted content are stored | digitalocean.com |
| Cloudinary | Stores and delivers uploaded images and site media | cloudinary.com |
| Resend | Sends transactional email, including one-time sign-in codes | resend.com |
| Analytics 4, Tag Manager and Ads measurement (consent-gated); Google sign-in; the mailbox that receives feedback and support messages | google.com | |
| Apple | Sign in with Apple, where you choose it | apple.com |
Choosing Google or Apple sign-in loads a script from that provider, which reveals your IP address and browser to it before you sign in. We may also disclose information where required by law, to enforce our Terms, or in connection with a merger or acquisition — in which case this policy continues to apply until you are told otherwise.
7. International transfers
The providers above operate globally, so your information may be processed outside your country, including in the European Economic Area, the United Kingdom and the United States. Where personal data leaves the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses, with the UK Addendum where applicable, or on an adequacy decision.
8. How long we keep it
- Account data — while your account is active, then up to 90 days after you close it.
- Content and uploaded images — while your account is active; deleted items are removed from live systems immediately and from backups within 35 days.
- Feedback and support messages — up to 24 months, so we can follow up and track recurring issues.
- Server logs — 30 days, longer where needed to investigate a security incident.
- Analytics data — up to 14 months.
- Accounting records — as long as tax law requires, typically 5 to 7 years.
9. Security
We serve the site over HTTPS, encrypt data in transit and at rest, support passkeys and one-time codes instead of reusable passwords, and restrict staff access to what a role requires. No system is perfectly secure, but if a breach affects your personal data we will notify you and the relevant supervisory authority as the law requires, within 72 hours where the GDPR applies.
10. Legal bases and your rights
Where the GDPR or UK GDPR applies, we rely on these legal bases:
- Contract — creating your account and providing the features you ask for.
- Legitimate interests — security, abuse prevention, answering your messages, and service communications, balanced against your rights.
- Consent — analytics and advertising cookies. You may withdraw it at any time via the cookie settings button, without affecting processing carried out beforehand.
- Legal obligation — tax, accounting and lawful requests from authorities.
Subject to your local law, you can ask us to give you a copy of your personal information, correct it, delete it, restrict or object to how we use it, or receive it in a portable format. Write to [email protected]. We will not treat you differently for exercising these rights.
EEA and UK
You have the rights in Articles 15–22 of the GDPR and may lodge a complaint with your national supervisory authority — in the UK, the Information Commissioner's Office.
California
You may request to know, delete or correct the personal information we collect. In the twelve months before this policy's date we collected identifiers, internet activity and approximate location, as described in section 2. We do not sell personal information. Allowing advertising cookies does constitute "sharing" for cross-context behavioural advertising under the CPRA; denying them in our banner, or sending a Global Privacy Control signal, opts you out. We do not knowingly collect the personal information of anyone under 16.
11. Children
The site is not intended for children under 16, and we do not knowingly collect their personal information. If you believe a child has given us personal data, write to [email protected] and we will delete it.
12. Changes
We may update this policy as the site changes. We will update the date above and, where the change is material — including any change to the artificial intelligence statement in section 3 — notify you in the product or by email before it takes effect.
13. Contact
Core Engine IT Infrastructure LLC, Al Souq Al Kabeer, R118, 201-A-19, Dubai, United Arab Emirates. Email [email protected]. We respond to privacy requests within 30 days.
This version is no longer in effect. Read the current version