Privacy Policy
Effective 2026-10-14
This is a draft and has not had legal review yet. It may change before launch.
What we collect from authors
When you sign up: your email, display name, and handle, and a hash of your password. We never store the password itself.
What you write: works, characters, lore, and highlights. Characters you publish are public.
What we collect from readers
Readers do not need an account. We give each browser a random visitor id, kept in a signed session cookie.
We store the time you confirmed your age, your conversation messages, and activity events such as views, messages, shares, and safety notices. Events are used for the counts shown on the service.
When you applaud a highlight, we store which highlight you applauded, linked to your visitor id, and when. If you send a report, we store its text.
Reports and network addresses
A report also stores a salted one-way hash of the reporter's network address (the IPv4 address, or the IPv6 /64 prefix). It is computed with HMAC-SHA256 and the server secret. We use it only to stop one person from hiding a character alone. The raw address is not stored.
Network addresses and rate limits
Apart from reports, network addresses are kept only in process memory to limit how fast one address can send requests, and are dropped after about 10 minutes of inactivity. They are not written to the database.
How we use it
To run accounts, continue conversations, show public counts, keep the service safe, and handle reports.
Service metrics for the operator leave out the operator's own seed data, and authors' test chats on their own characters are not counted.
Sharing with the model provider
When the AI provider is enabled, conversation text is sent to the model provider, Anthropic, so the character can reply. Messages that trigger a crisis notice are not sent and are not stored.
We do not sell personal information and do not share it for advertising.
Cookies and fonts
We set one cookie, greenroom_session. It holds your language, your login, a CSRF token, and the visitor id. There are no third-party analytics or advertising cookies.
Page fonts load from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Google receives your IP address, as any web server does when it serves a file.
How long we keep it
We keep this information while the service runs. There is no self-service deletion yet. To have your data deleted, ask the operator through the contact below.
Your rights
You can ask to see, correct, or delete the information we hold about you. Authors can edit their profile and works in the studio. For anything else, use the contact below.
Contact
The operator's email address will be announced on the service.