Privacy and terms

Privacy

Ballpit runs entirely in your browser. The simulation, the rendering and the video encoding all happen on your machine, and no clip you generate is uploaded anywhere.

Your settings, seeds and saved presets are stored in your browser's local storage. They never leave the device and are cleared when you clear site data.

Signing in is handled by Google. Google tells us your email address and your name, and nothing else. There is no password to choose and none is stored, because there is nowhere in this system that a password could be checked.

If you subscribe, Stripe handles the payment on Stripe's own pages and we keep only the customer reference it gives back, which is what tells us the subscription is live. Card details never reach this site.

Sign-ins, sign-outs and subscription changes are recorded so the account can be supported and so unauthorised access can be noticed. Those records keep the two letter country your request came from and nothing more precise: no IP addresses and no device fingerprints.

This deployment has no analytics and no error reporting configured, so nothing at all is sent off the device.

Fonts are requested from Google Fonts, which means your browser contacts Google's servers when the page loads. Self-host the fonts if you would rather it did not.

Terms

Clips you generate are yours. The output is produced procedurally from a seed and contains no third-party footage, music or artwork, so there is nothing here to clear before publishing or monetising what you make.

Anything you add yourself, such as an image you upload or text you put on a clip, is yours to be responsible for. Only add material you have the right to use. Uploaded images stay in your browser and are not sent to us.

The software is provided as is, without warranty. Rendering and recording happen on your hardware and results depend on your browser and machine; long or high-resolution exports may fail on constrained devices.

Recording uses the browser's MediaRecorder, which pauses when the tab is in the background. Keep the tab visible while a render is running or the clip may contain a frozen stretch.

A Pro subscription runs month to month, or year to year on the annual plan, and can be cancelled at any time from the billing portal, which is reached from your account. Cancelling stops the next payment and leaves Pro working until the period you have already paid for ends.

Do not use the app to produce content that is unlawful where you are, and do not represent generated clips as a recording of something real.