Privacy policy

Last updated 8 November 2026. Plain version: we collect very little, we use it only to make and follow up on your ads and to measure our own advertising, and we never sell it.

Who we are

Creativemonth is operated from Australia by [LEGAL NAME AND ABN TO COME]. Contact: hello@creativemonth.com. We handle personal information in line with the Australian Privacy Principles, and with the UK and EU GDPR where they apply to you.

What we collect

Your email and store link, when you ask for free ads, and that you ticked the box saying you own or may market the store.
Public store data: product names, descriptions, prices and product photos that your store already shows to every visitor. We read your store’s robots.txt first and skip stores that ask bots not to read their products.
A one-way scrambled code made from your internet address (for newer IPv6 addresses, from its first half, which identifies a connection rather than a device), valid for one day, used only to limit how many free packs one connection can make. We don’t store the address itself.
Counts: how many packs were asked for and made, what they cost us, how many checkout buttons were clicked, and the campaign tags in the link you arrived on (for example utm_source=meta). These counts contain no personal information.
Ad measurement (Meta pixel and Conversions API), see cookies and ad measurement below.
Payments (when you buy): handled by Stripe. We never see or store your card number. Stripe’s privacy policy applies to what you give Stripe.

How we use it

To make your ads and, if you buy, your one-off or monthly deliveries.
To reply to you and to follow up once about your free ads. No newsletters, and we never sell or rent your details.
To measure which of our own ads bring people to the site, so we spend less on the ones that don’t.

Who processes it for us

Vercel (hosting and storage, United States).
OpenRouter and the AI model provider it routes to (United States), which receive your public product information only to write ad copy. Your email is never sent to them.
Stripe (payments), once checkout is open.
Meta Platforms (ad measurement), only when the pixel is switched on and only as described below.

These providers are outside Australia, mainly in the United States. We choose providers with published security and privacy commitments.

What we keep, and for how long

We don’t keep the ad images or videos from free packs: they are made, sent to your browser, and not saved on our side (the video is recorded in your own browser). We keep your email and store link for up to 12 months after our last contact, then delete them. The daily limit codes are kept with that day’s counts. Paying customers’ records are kept as long as tax law requires.

Your choices

Email us to see, correct or delete what we hold about you, or to ask us to stop contacting you. We’ll answer within 30 days. If a pack was made from your store without your permission, email us and we’ll delete our record of it within 2 business days. If you’re unhappy with our answer you can complain to the Office of the Australian Information Commissioner (oaic.gov.au), or your local data protection authority.

Cookies and ad measurement

Today the Meta pixel is switched off: the site sets no advertising or tracking cookies. When we switch it on (we’ll update the date at the top of this page), this is what happens:

The Meta pixel loads from Meta and may set Meta cookies (such as _fbp) to tell us which of our ads led to a visit. It records these events: page viewed, free ads made, checkout button clicked, and purchase.
Our server may also send the same events to Meta directly (the Conversions API). For “free ads made” this includes a one-way scrambled (hashed) copy of your email, your internet address and browser type, so Meta can match the event to an ad it showed you. Meta acts on these under its own terms.
Visitors in the UK, the EU and EEA, Switzerland, or anywhere we can’t tell: none of this happens unless you say yes in the banner. Saying no, or ignoring the banner, keeps it off.
Visitors elsewhere (including Australia and the United States): the pixel runs by default. You can opt out at any time by blocking third-party cookies in your browser or in your Meta ad preferences, and you can ask us to stop sending server events for your email.

Your yes/no choice and your free ads are stored only in your own browser (local and tab storage), not on our side.