Privacy.

What is stored

• Your handle and a hash of your passphrase. Never the passphrase itself, in any form.
• Your hard limits — what she is never to send you — and the rest of your preferences: pronouns, your name for her (or that you asked her to choose it), the sexual-content toggle and its settings.
• The two self-ratings from signup, and your session-length preference (or that you left it to her).
• Your timezone, if you have one set — used only so a new day's offer arrives at your morning, not a server's.
• Your answers and completions — what you write for a question task, and the record that a task or session happened — encrypted (see below).
• Letters — anything you write to her, and anything she writes back — encrypted (see below).
• What you write when you report a problem, including the device and browser you type in yourself.
• Your standing with her — embers, motes, level, corruption stage and points, talents you've taken, trigger words trained into you, and your progress through her book and her quests.
• Dates you logged in. Dates only — never a time, a location, or a device.
• If you join a Patreon, a scrambled reference to that Patreon account — never its name or email — and what Patreon last reported about its pledge: whether it is active, its amount and its next charge date.

Your browser also keeps a few things for this site on your own device: the cookies that keep you signed in, your settings (sound, visuals, your spiral setups), small notes such as what you have seen or left unfinished, and, if you chose to stay signed in, your handle.

The cookies go only to this site. Nothing else is sent on its own, except a finished task still waiting to be reported, and a count of a session your browser closed partway through (which session, never who). Both go only here.

Logging out forgets your handle on that browser, and clearing this site's data in your browser's settings removes all of it.

What is never stored

No IP address. No user agent. No referrer. No browser or device fingerprint. No email address — none is ever asked for. No real name. No payment details of any kind; a membership is paid on Patreon, which keeps the card. None of this is disabled by a setting; it is simply never written down anywhere in the stack, logs included.

No third parties

Nothing here reports to anyone outside this service. No analytics, no advertising network, no third-party error-reporting tool, no tag manager, and no font or script loaded from someone else's server who could otherwise see your visit. If something here ever fails, it's logged to disk, on the machine that runs it — nowhere else. When a page crashes, or your browser closes a session partway through, the site counts that it happened and on which screen or in which session, and keeps nothing about who it happened to.

Encryption, in plain words

There are two separate locks, and they are never mixed. Your own words — task answers and letters — are locked with a key that lives outside the codebase and outside the database, unlocked only to show them back to you. Her private notes about you are locked completely separately, under a passphrase that only she holds on her own machine; the server that runs this site can never read them, under any circumstance.

How to delete

Settings has a single button. Pressing it is immediate and total: your handle, your answers, your letters, and everything about your standing with her are erased from the database at once — not deactivated, not held, not recoverable afterward by anyone, including her.

That erases what the service reads from day to day. Whether anything of it can briefly persist in an operational backup before that copy is itself cycled out is being confirmed, and this page will say so plainly once it is.

Changes

If what's stored ever changes, this page changes with it — there is no separate notice, so it's worth a re-read now and then.