Privacy.

What is stored

• Your handle and a hash of your passphrase. Never the passphrase itself, in any form.
• Your hard limits — what she is never to send you — and the rest of your preferences: pronouns, your name for her (or that you asked her to choose it), the sexual-content toggle and its settings.
• The two self-ratings from signup, and your session-length preference (or that you left it to her).
• Your timezone, if you have one set — used only so a new day's offer arrives at your morning, not a server's.
• Your answers and completions — what you write for a question task, and the record that a task or session happened — encrypted (see below).
• Letters — anything you write to her, and anything she writes back — encrypted (see below).
• Your standing with her — embers, motes, level, corruption stage and points, talents you've taken, trigger words trained into you, and your progress through the first week.
• Dates you logged in. Dates only — never a time, a location, or a device.

What is never stored

No IP address. No user agent. No referrer. No browser or device fingerprint. No email address — none is ever asked for. No real name. No payment details of any kind (there is nothing to pay for yet). None of this is disabled by a setting; it is simply never written down anywhere in the stack, logs included.

No third parties

Nothing here reports to anyone outside this service. No analytics, no advertising network, no third-party error-reporting tool, no tag manager, and no font or script loaded from someone else's server who could otherwise see your visit. If something here ever fails, it's logged to disk, on the machine that runs it — nowhere else.

Encryption, in plain words

There are two separate locks, and they are never mixed. Your own words — task answers and letters — are locked with a key that lives outside the codebase and outside the database, unlocked only to show them back to you. Her private notes about you are locked completely separately, under a passphrase that only she holds on her own machine; the server that runs this site can never read them, under any circumstance.

How to delete

Settings has a single button. Pressing it is immediate and total: your handle, your answers, your letters, and everything about your standing with her are erased from the database at once — not deactivated, not held, not recoverable afterward by anyone, including her.

That erases what the service reads from day to day. Whether anything of it can briefly persist in an operational backup before that copy is itself cycled out is being confirmed, and this page will say so plainly once it is.

Changes

If what's stored ever changes, this page changes with it — there is no separate notice, so it's worth a re-read now and then.