Follow where information goes.
This explains implemented data flows and the operating facts still awaiting verification. It is not a complete processor register or an effective privacy policy.
Updated:
Chat, generation and storage
The configured model service receives the inputs needed for the selected feature: prompts, character information, relevant conversation context and reference images. The site stores task records and results; object storage serves protected media under account permissions. The model and storage providers’ legal identities, locations, retention and training terms still require verification. We do not promise that all providers exclude training or international processing.
Sign-in, email and payment
The product supports Google sign-in when enabled, Resend account-verification and recovery email, and Stripe checkout. These services receive information needed for the corresponding flow. Full payment-card details are handled through the payment provider, rather than requested through support. Enabled services and their contracts must be checked before the final provider disclosure.
Security and browser storage
Cloudflare Turnstile, when enabled, receives browser and network signals for account checks. Login cookies and browser session storage support authentication, recovery and the age declaration. The Cookies page explains the implemented names and lifetimes. Actual edge analytics and advertising settings must be inventoried; no working optional-analytics consent manager is claimed.
Private support records
Requests store the submitted category, subject, reference, message, replies and status, plus the submitting account when signed in. A hashed private access key enables guest access; the raw key stays with the requester. Request links can authorize access and must be kept private. Support does not collect an email address or send email notifications.
Retention and verification gaps
Accounts, chats, media, tasks, payments, security logs, support requests and backups have different purposes. Records are not automatically erased when moved to Trash or when a support case closes. Category-specific retention criteria, provider deletion and backup expiry need a confirmed operating schedule; no arbitrary duration is stated here.