Privacy Policy
17 Movement respects your privacy and is committed to protecting your personal data. This privacy notice will inform you as to how we look after your personal data when you visit Animake or use our services (regardless of where you visit them from) and tell you about your privacy rights and how the law protects you.
This privacy notice is provided in a layered format so you can click through to the specific areas set out below. Please also use the Glossary to understand the meaning of some of the terms used in this privacy notice.
Purpose of this Privacy Notice
This privacy notice aims to give you information on how 17 Movement collects and processes your personal data through your use of Animake, including the website, the AI animation generator, the animation editor, Mixamo retargeting, the animation library, collections and teams (together referred to as "Animake" or "the service"), including any data you provide when you create an account, generate, edit or publish animations, join a team or buy a plan or credits.
Animake is not intended for children and we do not knowingly collect data relating to children. You must be at least 16 years old to create an account. We realise and understand that children and young people may visit this website, or otherwise interact with us and our commercial partners. It is our policy to encourage all minors to consult with their parents or legal guardian before submitting any content or information to us, our commercial partners or other third parties.
It is important that you read this privacy notice together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy notice supplements the other notices and is not intended to override them.
Controller
Animake is operated by 17 Movement, which is the controller and responsible for your personal data (collectively referred to as "17movement", "we", "us" or "our" in this privacy notice).
If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact us using the details set out below.
Contact Details
Email address: [email protected]
You have the right to make a complaint at any time to a supervisory authority for data protection issues, in particular the President of the Personal Data Protection Office in Poland (Urząd Ochrony Danych Osobowych, https://uodo.gov.pl) or the authority in your country of residence. We would, however, appreciate the chance to deal with your concerns before you approach a supervisory authority so please contact us in the first instance.
Changes to the Privacy Notice and Your Duty to Inform Us of Changes
This version was last updated on 22 October 2026 and historic versions can be obtained by contacting us.
It is important that the personal data we hold about you is accurate and current. You can update your name, handle, bio, avatar and email address in your account settings. Please keep us informed if any other personal data changes during your relationship with us.
Third-Party Links
This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
Identity Data includes your name, handle (username), avatar and, if you sign in with or link a Discord account, your Discord user ID and username.
Contact Data includes your email address.
Transaction Data includes details about payments to and from you, your plan and billing interval, subscription status, credit packs you bought, your Stripe customer and subscription references, and the history of your credit balance (credits granted, used, returned, transferred to or from a team and received as rewards). Your card and other payment details are collected by Stripe; we do not receive or store them.
Technical Data includes internet protocol (IP) address, your login data, browser type and version, operating system and device type, the country derived from your IP address, time zone and language settings, and the IP address and browser of each active sign-in session.
Profile Data includes your password (stored only in hashed form), two-step verification settings, bio, profile visibility, the creators and teams you follow, your favourite animations, your team memberships and roles, and your preferences.
Content Data includes the text prompts you write and the steps, names and tags derived from them, generation settings (such as duration, pinned poses, touch points and props), the animations generated for you and your edits to them, thumbnails and preview loops captured in the editor, clips you save, collections, pose presets, prop models and other files you upload, animations you publish to the library, and team names, descriptions and avatars.
Usage Data includes information about how you use our website and services, such as the pages you view and for how long, the website that referred you, generations, retargets and downloads.
Marketing and Communications Data includes your choices about analytics and advertising and your communication preferences.
We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity.
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences. Please do not include such information in your prompts, profile or other content.
If You Fail to Provide Personal Data
Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to create your account, process a payment or let you download the animations you generated). In this case, we may have to cancel a service you have with us but we will notify you if this is the case at the time.
We use different methods to collect data from and about you including through:
Direct interactions. You may give us your Identity, Contact, Profile and Content Data by filling in forms, using the service or corresponding with us by email at [email protected] or on our Discord server. This includes personal data you provide when you: create an account or sign in; confirm your email address or set up two-step verification; write prompts and generate, edit, retarget or save animations; upload prop models or other files; publish animations to the library or edit your public profile; create or join a team; buy a plan or credit pack; report a problem; or give us feedback.
Automated technologies or interactions. As you interact with Animake, we automatically collect Technical and Usage Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs, our own cookieless visit statistics, error reports and other similar technologies. When something goes wrong, we record the error together with the page, your browser and device, your IP address and country, and, if you are signed in, your account. Please see Cookies, Analytics and Advertising for further details.
Third parties or publicly available sources. We receive Identity and Contact Data from Discord if you sign in with or link a Discord account; Transaction Data from our payment provider Stripe; the country derived from your IP address and the result of bot protection checks from Cloudflare; and, if you allow advertising, Technical Data such as ad click identifiers from Google and Meta.
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances: where we need to perform the contract we are about to enter into or have entered into with you; where it is necessary for our legitimate interests; or where we need to comply with a legal or regulatory obligation.
Generally, we do not rely on consent as a legal basis for processing your personal data other than in relation to analytics and advertising cookies and the related sharing of data with Google and Meta. You have the right to withdraw consent at any time using the Privacy Choices link at the bottom of every page.
Purposes for Which We Will Use Your Personal Data
| Purpose/Activity | Type of data | Lawful basis for processing |
| To register you as a new user, confirm your email address and keep your account secure (sign-in, two-step verification, active sessions) | (a) Identity (b) Contact (c) Profile (d) Technical | (a) Performance of a contract with you (b) Necessary for our legitimate interests (to keep accounts secure and prevent fraud) |
| To provide the service: generate animations from your prompts, run the editor and Mixamo retargeting, store your clips, collections, props and pose presets, and let you download and export them | (a) Identity (b) Profile (c) Content (d) Usage | Performance of a contract with you |
| To process payments, manage subscriptions, credit packs and credit balances (including personal and team balances) and handle refunds: (a) Manage payments, fees and charges (b) Collect and recover money owed to us | (a) Identity (b) Contact (c) Transaction | (a) Performance of a contract with you (b) Necessary to comply with a legal obligation (tax and accounting) (c) Necessary for our legitimate interests (to recover debts due to us and prevent fraud) |
| To run teams: invitations, roles, shared team content and the team credit balance with member limits | (a) Identity (b) Contact (c) Profile (d) Content (e) Transaction | Performance of a contract with you |
| To publish what you choose to make public (library entries, public profiles, team pages and shared links), review library submissions and grant library rewards | (a) Identity (b) Profile (c) Content | (a) Performance of a contract with you (b) Necessary for our legitimate interests (to keep the library safe, lawful and useful) |
| To send you service emails: email confirmation, password resets, sign-in codes, email address changes, notices that a generation is ready, library review decisions and team invitations | (a) Identity (b) Contact | Performance of a contract with you |
| To manage our relationship with you, including notifying you about changes to our terms or privacy policy and answering your requests | (a) Identity (b) Contact (c) Profile | (a) Performance of a contract with you (b) Necessary to comply with a legal obligation (c) Necessary for our legitimate interests |
| To administer and protect our business and the service (including troubleshooting, error reports, rate limits, bot protection, prompt filtering, moderation, audit logs, system maintenance, support and hosting of data) | (a) Identity (b) Contact (c) Technical (d) Usage (e) Content | (a) Necessary for our legitimate interests (for running our business, IT services, network security, to prevent fraud and abuse) (b) Necessary to comply with a legal obligation |
| To measure how Animake is used with our own cookieless visit statistics and improve the service | (a) Technical (b) Usage | Necessary for our legitimate interests (to keep the service relevant and improve it) |
| To use Google Analytics, and to measure and improve our advertising with Google Ads and Meta | (a) Identity (hashed) (b) Contact (hashed) (c) Technical (d) Usage (e) Transaction | Consent (or, where US rules apply, until you opt out) |
Marketing
We strive to provide you with choices regarding certain personal data uses, particularly around analytics and advertising. You can view and change these choices at any time using the Privacy Choices link at the bottom of every page.
Promotional Offers from Us
At the moment we only send emails that are needed to run your account and the service, as listed in the table above. If we start sending promotional emails, we will only do so where the law allows and every such email will include a way to unsubscribe.
Third-Party Marketing
We do not sell your personal data and we do not share it with third parties for their own marketing purposes, other than the advertising measurement with Google and Meta described in Cookies, Analytics and Advertising, which only happens where advertising is allowed for you.
Opting Out
You can switch off analytics and advertising at any time using the Privacy Choices link at the bottom of every page. You can also ask us to stop any processing based on our legitimate interests by contacting us at any time.
Cookies
You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly; in particular, you cannot sign in without essential cookies.
For the cookies, analytics and advertising used on Animake, and how to change your choices, see Cookies, Analytics and Advertising.
Change of Purpose
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
This section explains what happens to your prompts and the content you create on Animake. It applies in addition to the rest of this policy.
Prompts and generation
When you generate an animation, we store your text prompt, the settings you chose (such as the duration, the number of takes, pinned poses, touch points and props) and the result with the generation in your history. Before a generation is created, we check the prompt against a list of blocked words and phrases to prevent misuse; we only count how often each rule is triggered.
To understand your request, we may send the text of your prompt to a third-party AI provider, which rewrites it in English, splits it into timed steps and suggests names and tags for the clip. We send only the text of the prompt, not your name, email address or account details. Under that provider's commercial terms, the text we send is not used to train its models.
The prompt (or the steps derived from it) and your settings are then processed on GPU servers operated by us or by our GPU processing providers, which create the motion and return it to us. They do not receive your name, email address or account details.
Guests
You can try the generator without an account. We then link your generations to a code calculated from your IP address and browser identification string with a secret key, so that only you can see them, and we limit the number of guest generations per network in the same way. Guest previews are kept for 1 day.
Editor, retargeting and uploads
Your edits are saved to your account automatically, together with thumbnails and short preview loops captured from the 3D stage, so you can continue where you left off. When you retarget a Mixamo FBX (or another animation file), the file is processed in your browser and is not uploaded; we store only the resulting animation and the original file name. Prop models (.ydr and .yft files) and pose presets you save are stored privately in your account or team.
Sharing and the public library
If you turn on a public link for a generation, anyone with the link can view it on the 3D rig until you turn the link off. If you publish an animation to the library, its name, tags, preview, thumbnail and files become public after our moderators approve it, together with your name and handle unless your profile is private. Other users can download and fork published animations. We email you our review decision.
Public profiles and teams
Your public profile at /u/<handle> shows your name, handle, avatar, bio, the date you joined, counters (such as published clips, downloads and likes) and the animations you published. You can make your profile private in your account settings; a private profile is hidden from everyone but you, and your name is not shown on your library entries. Team pages at /t/<handle> show the team's name, avatar, description, published animations and, if the team chooses, its members. Members of a team can see the team's content, and team owners and admins can see how many credits each member has used.
We may have to share your personal data with the parties set out below for the purposes set out in the table in How We Use Your Personal Data above.
External Third Parties as set out in the Glossary.
Specific third parties such as: our hosting and storage providers; Stripe, which processes payments and manages subscriptions (when you create an account, we create a customer record at Stripe with your name and email address so that you can subscribe later); Mailgun, which delivers our emails; Cloudflare, which delivers and protects our website and runs the bot protection checks; our GPU processing providers; and the third-party AI provider that processes the text of your prompts.
Discord, if you sign in with or link a Discord account (see Discord Sign-In and Discord Community), and Google and Meta, only if analytics or advertising is allowed for you (see Cookies, Analytics and Advertising).
Other Animake users and the public, for content you choose to make public: published library entries, public profiles, team pages and generations you share by link. Members of your teams see the content of those teams.
Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions. Stripe, Discord, Google and Meta also process some data as independent controllers under their own privacy policies.
Some of our external third parties (for example Stripe, Mailgun, Cloudflare, Discord, Google, Meta, our AI provider and some of our GPU processing providers) are based outside the European Economic Area (EEA) or process data outside it, so their processing of your personal data may involve a transfer of data outside the EEA.
Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented: we will only transfer your personal data to countries that have been deemed to provide an adequate level of protection by the European Commission (including, for certified companies in the United States, the EU-U.S. Data Privacy Framework), or we may use Standard Contractual Clauses approved by the European Commission.
Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. Passwords are stored only in hashed form, connections to Animake are encrypted (TLS), links to your files are signed and expire, and access to our admin panel is limited to authorised staff and protected by two-step verification. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.
You can also help us to protect your personal data by: keeping your password private; not reusing it on other websites; turning on two-step verification in your account settings; and reviewing the active sign-in sessions shown there (changing your password signs out your other devices).
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
How Long Will You Use My Personal Data For?
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
In particular:
- Account data is kept for as long as you have an account. When you ask us to delete your account in your account settings, we review the request, cancel any active subscription and delete your account. Content that belongs to a team stays with that team.
- Sign-in sessions expire 7 days after your last activity.
- Generated files can be downloaded for the retention period of your plan, shown in your dashboard (guest previews: 1 day). After that they are no longer available. The record of a generation (the prompt, its settings and the credits used) stays in your history until your account is deleted.
- Animations published to the library stay public until you ask us to remove them or we remove them. Forks published by other users stay in the library as their own entries.
- Error reports are kept for as long as we need them to investigate and fix the problem, and are then deleted.
- Visit statistics and records of your privacy choices are kept as described in Cookies, Analytics and Advertising.
By law we have to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for up to 10 years after they cease being customers for tax purposes.
In some circumstances you can ask us to delete your data. In some circumstances we may anonymise your personal data for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to: request access to your personal data; request correction of your personal data; request erasure of your personal data; object to processing of your personal data; request restriction of processing your personal data; request transfer of your personal data; and the right to withdraw consent.
You can exercise some of these rights yourself: you can correct your name, handle, bio, avatar and email address, make your profile private and request deletion of your account in your account settings, and change your analytics and advertising choices under Privacy Choices. If you wish to exercise any of the other rights set out above, please contact us at [email protected].
No Fee Usually Required
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive.
What We May Need from You
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We will usually ask you to write to us from the email address linked to your account.
Time Limit to Respond
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
Lawful Basis
Legitimate Interest means the interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience.
Performance of Contract means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.
Comply with a legal or regulatory obligation means processing your personal data where it is necessary for compliance with a legal or regulatory obligation that we are subject to.
Consent means processing your personal data where you have given us clear permission to do so for a specific purpose, which you can withdraw at any time.
Third Parties
External Third Parties
Service providers acting as processors based within and outside the EEA who provide IT and system administration services, hosting and storage, payment processing, email delivery, content delivery and security, GPU processing and AI prompt processing. Professional advisers including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services. Tax authorities, regulators and other authorities who require reporting of processing activities in certain circumstances.
Your Rights in Full
Request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected.
Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it.
Object to processing of your personal data where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground.
Request restriction of processing of your personal data in certain scenarios, including where you want us to establish the data's accuracy or where our use of the data is unlawful but you do not want us to erase it.
Request the transfer of your personal data to you or to a third party in a structured, commonly used, machine-readable format.
Withdraw consent at any time where we are relying on consent to process your personal data.
You can sign in to Animake with Discord, or link a Discord account to an existing account in your account settings and then sign in with either. This section explains what data we process when you do. It applies in addition to the rest of this policy.
What data we process
Account data. When you sign in with Discord, Discord shares with us your Discord user ID, username, avatar, email address and whether that email address is verified, together with access tokens for the sign-in. We use them to create or identify your Animake account, and your Discord name and avatar may become your Animake name and avatar until you change them. An account can only be created with Discord if Discord has verified your email address.
Avatars. If your Animake avatar comes from Discord, it is loaded from Discord's servers when someone views it, so Discord receives the viewer's IP address and browser information.
Error reports. If an error occurs while you are signed in, the report may include whether a Discord account is linked and its Discord user ID, so we can help you with sign-in problems.
Legal basis
- Performance of a contract (Art. 6(1)(b) GDPR): signing you in with Discord and linking your Discord account at your request.
- Legitimate interest (Art. 6(1)(f) GDPR): keeping accounts secure and investigating errors.
How long we keep it
We keep the link to your Discord account for as long as your Animake account exists, and delete it when your account is deleted.
Our Discord community
We provide support for Animake on our Discord server (https://discord.17movement.net/). The processing of your data by our Discord bot, support tickets and moderation on that server is described in the 17movement.net privacy policy.
Discord's own processing of your data is governed by Discord's Privacy Policy: https://discord.com/privacy
