Privacy Policy

This policy describes what Your Tale collects, why it needs it, and how it is protected. It covers the website, the story engine and the account tools, and it applies whether you are browsing as a guest or playing every day.
What we collect
When you create an account we store the details you provide: a display name, an email address and a hashed password. These are required to keep your sagas attached to you and to let you sign in securely. If you add a payment method, the payment provider handles the card details; we receive only the confirmation needed to credit your account.
While you play, we store the heroes you create, the adventures you write, the scenes generated for you and the usage records that show which model answered a request. We also keep a small amount of technical data, such as session cookies and error logs, to keep the service running.
How we use it
Your data is used to keep you signed in, save progress, run generations and show your own usage and settings. Translation strings are cached so the same passage is never paid for twice. Aggregate, non-identifying figures help us understand which parts of the platform are used and which need work.
Who else sees your data
Your scene text is sent to the model that generates it. With BYOK it goes through your own OpenRouter key; otherwise it uses the platform's configured chain. Payment processing, email delivery and error monitoring are handled by specialist providers under their own terms. We do not sell personal data, and we do not share it for advertising.
How we protect it
Traffic is encrypted, passwords are hashed, API keys you add are stored server-side and never returned to the browser, and access is scoped per account. Backups are access-controlled and retained only as long as they are needed to restore the service.
Your controls
You can delete a hero or an adventure from its page, clear usage logs in Settings, and remove your BYOK key whenever you want. Closing your account removes your personal data, subject to the short retention period needed for backups and legal obligations. To exercise any of these rights, or to ask a question about this policy, use the contact page.