Privacy Policy

Version 2026-10-31.1 · Last updated October 31, 2026

This policy explains what StoryDraft collects when you use it, why, and what you can do about it. We keep it short because we collect little.

Who is responsible

Ayphos Servicos de Internet LTDA (CNPJ 17.156.444/0001-13, Avenida Maria Estela, 313, São Paulo, Brazil) runs StoryDraft and is the controller of the personal data described here. Dodo Payments is responsible, as the seller, for the payment data it collects at checkout (see below). For anything about your privacy, write to [email protected].

What we collect

Your email address, to create your account and send you sign-in codes and the emails a plan needs (such as the reminder before your free month ends).
When you accepted these terms and which version, and when you last signed in.
Your sessions: for each device you sign in on, the browser's user agent, the IP address it signed in from and when it was last used, so we can keep you signed in and spot misuse.
What you create in StoryDraft once you are signed in, such as your games, maps, moments, characters and Lore, so we can save them to your account.
Files you upload (pictures, documents, sounds and videos), with their names, types and sizes, so you can use them in StoryDraft.
What you send us in feedback and support tickets: what you write, the files you attach, where in StoryDraft you sent it from (the page, the screen's size, the language) and the emails you send us about it, so a person on our team can read and answer it.
What you ask Imagine, Ideas, Find the walls, Magic rooms and Lore's summaries for, and what they answered, with how many creations you used, so we can count them against your plan and fix what goes wrong.
What you do in StoryDraft: which pages, steps and features you use and when (the same events as the counts below, such as opening the pricing page, ticking its box or picking the Lore view), with the kind of device, your browser's language and time zone, the website that sent you and the campaign named in its link. Once you sign in they are tied to your account, those of that visit before you signed in too, so we can see how far people get on the way to a plan and which features matter. Never anything you type.
Your plan: its name and interval, its status (trial, active, cancelled…), when the trial ends and the period renews, and the ids Dodo Payments gives your customer record, subscription and payments. We also keep the events Dodo Payments sends us about your subscription and payments; they can include your name, your billing address and the brand and last four digits of your card. We never see or store your full card number.

Sign-in codes are never stored in readable form, and neither are session tokens: we keep only a one-way fingerprint of each.

What we use it for, and why we may

To give you StoryDraft (your account, saving your games, the features you use, your plan and the emails it needs): this is the contract between us.
To keep StoryDraft and your account secure (limiting repeated attempts, spotting misuse, preventing abuse of the free month): our legitimate interest in a safe service.
To see how StoryDraft is used: how many people visit our home and pricing pages and press their buttons, get through each step of signing in and of starting a plan, or use a feature, and how far each account got, so we can see what works and what gets in the way. This is our legitimate interest in improving StoryDraft.
To keep billing records as tax and accounting laws require: a legal obligation.

We don't sell your data, and we don't use it for advertising.

Who helps us run StoryDraft

These services process data for us, and each gets only what it needs for its job:

Dodo Payments (dodopayments.com) is our reseller and Merchant of Record: it runs the checkout, takes the payment, handles taxes, receipts, invoices and refunds, and keeps the payment details you give it under its own privacy policy. When you start a checkout we send it your email and the name you go by at tables, to make your customer record. It tells us your plan's status and the details above, never your full card number.
OpenRouter passes a request to the provider of the language model that answers it (today OpenAI, Google and Anthropic), only from these features and only when you press their button: Imagine and Magic rooms (your words, the map's size and the names of the things it may place), Ideas (your words, and the object you are changing), Find the walls (the battle map's picture you trace, and its name) and Lore's suggested line (the page's title, its facts and the text of its tabs that aren't secret). Nothing else goes with it: not your email, your account, your payment details or the rest of your games. We use advanced models from several providers and can't guarantee that none of them will ever use what it receives to train or improve its models; their own policies decide that, and how long they keep it. So leave personal information out of what you type there. See our plain answer about AI.
Resend delivers our emails.
Our servers and database are hosted on Railway, and the files you upload are stored with Amazon Web Services (S3).
PostHog counts the visits and steps above. It never receives your email address, your sign-in codes or anything you typed, only which page, step or feature happened (and which button was pressed), whether the account is new, and the kind of browser and device you used (as any website visit shows). We ask it to discard IP addresses.

When a moment shows a YouTube or Vimeo video you linked, or when you play the film on our home page, your browser loads it straight from that service (YouTube in its privacy-enhanced mode), which then sees that visit under its own privacy policy. Nothing is loaded from them unless a moment uses one of their videos or you press play on the film.

We also share data when the law requires it (with tax or other authorities) and with professional advisers, such as our accountant, under a duty of confidentiality.

Data that leaves your country

These services run in the United States and other countries. When your data travels to them, it is protected by the safeguards the law asks for, such as the European Commission's standard contractual clauses or an adequacy decision, and their equivalents under Brazil's LGPD and UK law.

Storage on your device and cookies

When you sign in, your browser keeps a session token in its local storage so you stay signed in. Signing out removes it. If you use StoryDraft without an account, the game and the characters you make are kept only in your browser's local storage: they never reach us, they aren't on your other devices, and clearing your browsing data erases them. When you sign in, they move into your account and leave the browser. The players' screen you can open from a moment talks to the editor inside your browser only. A few choices (such as which hints you have already seen) are remembered the same way.

We don't use cookies, and the counts store nothing on your device: a visit's number lives only in the open page. Dodo Payments' checkout may set the cookies it needs to take a payment safely, under its own policy.

How long we keep it

Your account and what you create stay while you have an account. When you delete it, they are deleted right away (see below).
Sign-in codes expire after 10 minutes, and a session stops working after 30 days without use.
What you do in StoryDraft (above) is kept for 13 months. When you delete your account it stops being tied to you: what is left counts as a visit without an account.
Your plan's records here (its status, dates and Dodo Payments ids) stay while you have an account, and Dodo Payments' webhooks about it for 90 days. When you delete your account, your plan is cancelled first and they go with it. Dodo Payments, the seller, keeps the payment and tax records (receipts, invoices) for as long as tax and accounting laws require, generally five years, under its own policy.

Deleting your account

You can delete your account yourself at any time: sign in, open the account menu (your initial, at the top right), choose "Your account" and press "Delete account". A plan running is cancelled first. You don't need a password: if you can read your email, you can sign in. Deleting it removes, right away and for good:

your account and its email address
your sign-in records: every device you are signed in on and every sign-in code we sent you
all the work saved to your account, such as your maps, moments and characters
the images, sounds and videos you uploaded
your feedback and support tickets, with their messages and files

It can't be undone. A plan that is running is cancelled first; the billing records above stay as long as the law asks.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to limit or object to how we use it, or to send it to you in a format another service can read, and you can withdraw any consent you gave. Depending on where you live, laws such as the GDPR (in the EU and the UK) and the LGPD (in Brazil) give you these rights. Write to us (see the top of this page) and we answer within 15 days. You can also complain to your data protection authority, such as the ANPD in Brazil or your country's supervisory authority in the EU.

How we protect it

Everything travels encrypted (HTTPS). Sign-in codes and session tokens are stored only as one-way fingerprints, the files you upload are kept in private storage, and only the people who run StoryDraft can reach the data, when they need to. If something ever goes wrong, we tell you and the authorities as the law asks.

Children

StoryDraft is not meant for children under 13, and we don't knowingly collect their data.

Changes

When this policy changes in a meaningful way we update the version above and ask you to accept it the next time you sign in.

Contact

Questions about your privacy? Write to us at [email protected].