1. Scope, purpose and legal grounds
This notice covers secretbook.io accounts, AI writing, books, character tools, community features and support. We process data needed to deliver requested services, secure accounts, verify payments and meet legal duties. Where applicable, processing relies on contract, legal obligations, a properly assessed legitimate interest or a separate consent; this notice alone is not consent to every use.
2. Account and authentication data
Depending on your sign-in method, we store an account identifier, pen name, supplied email, provider identifier and authentication records. Passwords use salted scrypt hashes; passkeys store public keys and device metadata, not fingerprint or face templates. Provider accounts are not automatically merged by email. Adult access records a self-declaration and its time; it is not identity verification.
3. Manuscripts, AI requests and storage
Browser recovery copies and preferences use local storage under the account context. Account documents, writing jobs, generated media and character conversations can also be stored on the server. To fulfill a generation request, relevant prompts, manuscript context, character notes and any supplied reference material are transmitted to the configured AI service. Minimize real personal or confidential information in creative inputs; we do not promise that all content stays on your device.
4. Community, sharing and communications
Optional profiles include a pen name, biography, occupation, age range, avatar and banner according to your visibility choices. Shared editions require a separate publishing action; an unlisted link can be forwarded, and downloaded copies cannot be recalled. Posts, uploads, comments, recommendations, relationships, reports and member messages are stored. Member messages are not end-to-end encrypted and are not sent to the writing AI by the messaging feature itself. Uploaded files can contain identifying metadata.
5. Cookies, preferences, previews and payments
Secure authentication cookies support sign-in and security challenges; browser storage keeps language, appearance and recovery state. Guest previews use a cookie, a hashed network identifier and usage counters; preview records are subject to cleanup after seven days, and a same-browser signup can import them. Payment records include order, plan, amount, credit grants and transaction identifiers. Blockchain addresses and transfers are public and cannot be erased by SecretBook. Creating a free account does not start recurring billing.
6. Recipients and international processing
Cloudflare infrastructure supports hosting and account/content storage. Depending on enabled features, AI requests can use OpenRouter and its upstream providers, OpenAI, Google, Anthropic or a configured external endpoint; chosen login and email services also process necessary data. Only data needed for the requested operation should be transmitted. The reviewed recipient names, countries, transfer grounds, timing, contact details and provider retention periods must be completed in the operator disclosure schedule before this policy takes effect. No blanket third-party no-training or zero-retention guarantee is made here.
7. Retention, deletion and protection
Browser copies remain until you clear them or the application replaces them; clearing browser data can remove unsynced work. Hiding a work or moving it to trash is not permanent erasure. Server data is retained for the service purpose or applicable legal duties and is deleted or de-identified when no longer needed; exact category periods, backup limits and statutory grounds require a confirmed schedule. Contact support to request erasure; identity checks may be needed. Access controls and secure transport reduce risk but do not guarantee absolute security.
8. Rights, children, requests and changes
Subject to applicable law, request access, correction, deletion, restriction, portability, objection or withdrawal of consent at support@secretbook.io; you may also contact your competent privacy authority. If you are not legally able to use an account, obtain legally required guardian involvement; adult features are restricted to eligible adults under local law. A guardian can report a child's data for review. We will identify the operator and privacy contact in the confirmed disclosure schedule and give appropriate notice of material changes.