Your data and your choices.

What we collect and why

• Account details: your email, display name, optional profile details, password hash, optional recovery-answer hash, access approval and session records. These support sign-in, recovery and account administration.
• Your novels: scenes, dialogue, choices, settings, asset links and any embedded files you save. We use them to provide editing, storage, playback and export.
• Enquiries: the name, email, optional phone, selected support topic and message (or the service selected in an older enquiry) you submit. The site owner can see these in a private admin inbox and update their follow-up status.
• Connection records: the assistant’s registered client details, permissions you approve, expiry times and hashed OAuth tokens. These allow and revoke access to your own open novel.
• Security information: session identifiers, rate-limit counters and hosting request logs. Enquiry rate limits use a daily hash of your IP address rather than storing the plain IP in the enquiry record. The hosting provider may separately process IP addresses in operational logs.

Please do not submit passwords, payment information or sensitive personal information in story content, support messages.

Where information is stored

The hosted application saves account, novel, enquiry and connection records on Netlify. A locally run copy saves these records on that computer. We hash passwords and OAuth credentials; novel content and enquiry text are readable by authorised hosting administrators and are not protected by application-level end-to-end encryption.

When image hosting is configured, uploaded media may be stored on Wix and delivered through its CDN. Other artwork may be embedded in a project or linked from an external host. CDN links can be accessible to anyone who has the link. Loading externally hosted media also makes a request to that host.

Connected assistants and AI providers

The plugin only accesses the account that authorises it. Read permission returns content from that account’s currently open novel; write permission permits creating, changing and deleting its content. Optional image requests can return the actual artwork. Switching the open novel in the editor changes the novel available to a linked assistant.

Tool results go to the assistant you connect. If you connect ChatGPT, the selected story content and requested images returned by those tools are sent to OpenAI and handled under its policies. Connecting another assistant shares results with that provider. We do not send account passwords, support messages, admin records or application source code through the public plugin.

Optional generation features in the editor follow the provider and settings you choose. Connecting an assistant does not enable a separate model API.

Sharing and use

We use the information to operate the features you request, respond to enquiries, maintain security and troubleshoot problems. Infrastructure and media providers process data as needed to deliver those features. We do not sell your novel content or use it to train our own models. Your external assistant’s retention and model-training settings are controlled by that provider.

Hosting and connected service providers may process information outside your country. Their service terms and privacy policies also apply to their processing.

Retention and deletion

Account records, saved novels and enquiries remain stored while needed to provide the service and handle your requests; there is currently no automatic deletion schedule for those records. You can delete novels from your library and request account or enquiry deletion using the contact form. We may ask you to verify ownership before acting on a request.

OAuth consent requests expire after 10 minutes, authorization codes after 5 minutes, access tokens after 30 minutes and connections after at most 30 days. Expired credentials stop working. Inactive registration and authorization records can remain in storage until maintenance or an account-deletion request; expiry is not a promise of immediate physical erasure. Rate-limit entries are pruned when their store is next updated.

Removing an asset reference or deleting a novel does not guarantee deletion of externally hosted media, legacy copies, provider backups or data already received by an assistant. Include those items in a deletion request if relevant. We will explain any retained records or provider limitations when responding.

Your controls

You can export your project, edit or delete novels, sign out, and disconnect an assistant. Disconnecting revokes future OAuth access. For correction, access, account deletion, old token connections or a privacy concern, use Contact us and select “Privacy or deletion request”. You may also have rights under the data protection laws where you live.

Essential cookies maintain sign-in and protect the account-linking flow. See the cookie policy. This service is not intended for children under 13; users who need a parent or guardian’s permission must obtain it. Report an underage account through the contact form.

Policy changes

We will update the date on this page when the policy changes. Material changes to account permissions will require a new authorization where applicable.