AI STORY FORGE — PRIVACY NOTICE

This is a plain-language summary of what AI Story Forge stores about you
and why, not a formal legal document.

WHAT WE STORE
- Account info: your username, email address, and a bcrypt-hashed password
  (never your actual password — we can't see it, and neither can anyone
  who gets access to the database).
- Guest accounts: a randomly generated throwaway username and a random
  password you never see or set, so a guest session can still save/load
  during play.
- Your game data: character sheets, save slots, and story history you
  create while playing, tied to your account.
- Your own AI key (optional): if you add a personal API key for Gemini,
  Groq, Cerebras, or OpenRouter (see Account Settings), it's encrypted
  before it's stored and only decrypted server-side to make your AI
  requests. It is never sent back to any browser in plain text.
- Standard technical logs (e.g. IP address, request timestamps) kept
  briefly for abuse prevention and debugging.

WHAT WE DON'T DO
- We don't sell your data.
- We don't share your account info, saves, or API keys with anyone else.
- We don't put ads in front of you based on tracking your activity.
- We don't use your API key for anything other than generating your own
  story content when you're playing.

THIRD PARTIES INVOLVED IN PLAY
- If you're using the shared AI pool (the default, no key added), your
  prompts are sent to whichever AI provider is configured server-side
  (e.g. Google Gemini, Groq, Cerebras, or OpenRouter) to generate the
  story text. Those providers process that request under their own
  privacy terms.
- If you connect your own key (including via OpenRouter's one-click
  "Connect" option), the same applies to that provider directly, using
  your account with them instead of ours.

YOUR CHOICES
- You can remove a personal API key at any time from Account Settings.
- You can stop playing and stop using the service at any time; contact us
  (see below) if you'd like your account and saved data deleted.

CONTACT
Questions about this notice or a data deletion request: jamesdeer66666@gmail.com.

Last updated: 2026.