Last updated: 19 October 2026
Amplify.is ("Amplify", "we", "us") is an AI game maker and web builder run by an individual based in Iceland. This policy explains how we handle personal data when you use amplify.is, Stofan (the web builder at amplify.is/stofa), our Telegram bot (@Amplifygamebot), our Whop storefront, and the games and sites we publish.
Contact for privacy questions: hello@grow.contact
We are the controller of the personal data described in this policy under the EU General Data Protection Regulation (GDPR) and Icelandic data protection law (Act No. 90/2018).
You can describe a 2D game, website or web app and Amplify builds it with AI. Games can be played in the browser and in Telegram. You can buy prepaid build credits on amplify.is (paid through Stripe), on Whop, or in the Telegram bot (Telegram Stars). Published demo games are free to play.
| What | When | Why (purpose) | Legal basis (GDPR) |
|---|---|---|---|
| Account details (email, display name, sign-in token) | When you create an account on amplify.is / Stofan | To run your account and the builder | Contract (Art. 6(1)(b)) |
| Contact messages (name, email, message) | When you write to us | To reply to your request | Legitimate interest / steps prior to a contract (Art. 6(1)(f) / (b)) |
| Payment metadata (amount, currency, pack bought, payment status, Stripe / Whop / Telegram payment ids) | When you buy credits | To take payment, deliver credits, handle refunds and keep accounts | Contract; legal obligation for bookkeeping (Art. 6(1)(b), (c)) |
| Telegram user id, username and chat context | When you use @Amplifygamebot | To run the bot, deliver games and process Stars payments | Contract (Art. 6(1)(b)) |
| Project and build data (prompts, generated code and assets, settings) | When you use the builder | To create and store your builds | Contract (Art. 6(1)(b)) |
| Game scores and display names you submit | When you post a score to a leaderboard | To show leaderboards | Legitimate interest (Art. 6(1)(f)) |
| Technical logs (IP address, browser type, timestamps, error logs) | Automatically when you use the site or bot | Security, abuse prevention, language selection by country, debugging | Legitimate interest (Art. 6(1)(f)) |
We do not sell your personal data. We do not use advertising trackers on amplify.is.
Payment card numbers are handled by Stripe, Whop or Telegram. We do not store full card numbers on Amplify servers.
To generate code, text and images we send your prompts and the minimum related project context to third-party AI model providers, currently OpenRouter (a routing service) and the model makers it routes to, such as Anthropic, OpenAI, Google, xAI and Moonshot AI, plus Tripo for 3D assets. Those providers process that content to return a result. Do not put secrets, other people's personal data, or anything you do not want processed by those providers into a prompt.
| Processor / service | Role |
|---|---|
| Managed PostgreSQL database provider (AWS eu-central-1, Frankfurt, Germany) | Database for accounts, projects, credits and related records |
| Stripe | Web payments on amplify.is |
| Whop | Payments and storefront at amplify.whop.site |
| Telegram | Bot platform and Telegram Stars payments |
| Manus (application hosting and delivery) | Hosting, delivery, TLS. Application servers and CDN edge locations may be outside the EEA. |
| OpenRouter, Anthropic, OpenAI, Google, xAI, Moonshot AI and other model providers reached through OpenRouter | Generate code, text and images from prompts |
| Tripo | Generate 3D models and sprites used in games |
Our database is stored in the EU (Frankfurt, Germany). Some other providers, including the AI providers and hosting/CDN, may process data outside the European Economic Area, for example in the United States. Where that happens we rely on an approved transfer tool such as the European Commission's Standard Contractual Clauses, or on an adequacy decision, where available.
| Data | Retention |
|---|---|
| Account and project data | While the account is open; deleted within 30 days after you delete the account or ask us to, and after 24 months of inactivity, unless the law requires longer. Backups expire within a further 30 days. |
| Payment and invoice records | 7 years, as required by Icelandic bookkeeping and tax rules |
| Contact messages | Up to 12 months after the last reply, longer only for an open dispute |
| Security and server logs | Up to 90 days, longer only to investigate an incident |
| Telegram bot data | While you use the bot; deleted within 30 days of your request |
| Prompts sent to AI providers | Kept by us as part of your project; providers keep them only under their own terms and retention policies |
You own the builds you create with Amplify (code, assets and content that belong to you), subject to the [Terms of Use](/whop-terms.html). We keep a limited licence to host and run them so the service works. You can export your projects. Deleting an account removes project data from our active systems; backups may take a short extra period to expire.
Credits are prepaid credit stored on your Amplify account for the channel you bought them on (web, Whop and Telegram balances are separate). Unused credits can be refunded within 14 days of purchase. Spent credits are not refundable. Refund requests go through the channel you paid with or to hello@grow.contact.
Amplify is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has given us data, contact hello@grow.contact and we will delete it.
You can ask us to access your data, correct it, delete it, restrict or object to certain processing, and receive a copy in a portable format where applicable. You can also withdraw consent where processing is based on consent.
To use these rights, email hello@grow.contact. We may need to verify your identity.
You can complain to the Icelandic Data Protection Authority (Persónuvernd), www.personuvernd.is, or to your local EU / EEA supervisory authority.
We use HTTPS, access controls and standard cloud security practices. No method of transmission or storage is completely secure; please use a strong password and keep your login details private.
We may update this policy. The "Last updated" date at the top will change when we do. For material changes we will try to notify you by email or a notice on the site.
Amplify.is
Email: hello@grow.contact