Privacy Policy

1. Who we are

Tavern Online LLC, EIN 00-0000000, 000 Example Street, Dover, DE 19901, USA (details are test placeholders and will be replaced before public launch). Privacy requests: support@example.com.

2. Information we collect

Account data: username, password hash (we never store the plain password), registration date, 18+ confirmation, and the version and date of accepted Terms.

Usage data: worlds, characters, chats and messages you create, generated images, turn and token counters, and technical logs (request time, IP address, error type, model identifier).

We do not intentionally collect sensitive categories of personal information. Please do not include health, religious, or other sensitive details in your messages: they may become part of your history and of model requests.

3. Purposes and legal bases

We use information to provide the Service and generate responses, store your history, enforce limits, keep the Service secure and operational, respond to support requests, and comply with law.

Where GDPR-style bases apply, we rely on performance of a contract, your consent (given at registration and withdrawable at any time), and our legitimate interests in securing and improving the Service. Withdrawing consent ends access to the account.

4. Sharing

Turn text and the context needed to answer are sent to third-party AI model providers solely to generate responses.

We may disclose information to service providers under contract, to authorities when required by law, and in connection with a merger or acquisition, subject to this Policy. We do not sell personal information and do not share it for cross-context behavioral advertising.

5. Retention

Account data is kept until you delete your account. After deletion we delete or de-identify personal information except where retention is legally required.

Technical logs are kept for up to 30 days, text samples used for debugging for up to 14 days, and turn history is deleted together with the chat.

6. Your rights

Depending on where you live, you may have the right to know or access the personal information we hold, to correct or delete it, to opt out of sale or sharing (we do neither), and to be free from discrimination for exercising these rights.

California residents may exercise CCPA/CPRA rights by writing to support@example.com. We verify requests using account information and respond within the timeframe required by law (45 days, extendable once). Requests for information about the data we hold are answered by email; we do not provide automated bulk exports of account data.

Account deletion is performed on request. There is no automatic password reset: if you lose access, contact support.

7. Security

We use organizational and technical safeguards: password hashing, restricted infrastructure access, security event logging, HTTPS in transit, and backups. No method of transmission or storage is completely secure; we notify affected users and authorities where required by law.

8. Cookies and local storage

We use strictly necessary cookies and browser local storage for the auth token, language, and theme. These are not used for advertising profiles.

You can clear local data in your browser; this signs you out and resets interface preferences.

9. Children

The Service is not directed to children under 18 and we do not knowingly collect their personal information. If we learn that a minor has registered, we terminate the account and delete the data.

10. Changes

We may update this Policy and will post the new version with an effective date. For material changes we ask for renewed consent at your next sign-in.