Privacy Policy

1. Information We Collect

We collect the information needed to operate TaleRun:

• Account information, including your email address and, when you use Google sign-in, your name and profile picture
• Guest and security information, such as session identifiers, IP address, user agent, device or network identifiers, and login records
• Content you provide or create, including story ideas, player profiles, actions, story content, images, play history, AI-generated responses, and published content
• Billing records from Stripe, such as customer, subscription, invoice, payment status, amount, and currency; TaleRun does not receive your full card number
• Feedback and support information, including any contact email and the page, browser, referrer domain, time zone, and viewport details submitted with feedback

2. How We Use Your Information

• To provide accounts, guest access, interactive stories, creation tools, saved progress, publishing, and customer support
• To process subscriptions, energy allowances, cancellations, refunds, and related records
• To secure the service, prevent fraud and abuse, enforce our rules, moderate content, and diagnose failures
• To understand aggregate service performance and improve TaleRun
• We process information as needed to perform our contract with you, pursue legitimate interests in operating and protecting the service, comply with legal obligations, and obtain consent where required

3. AI Processing

TaleRun uses AI to create, translate, illustrate, summarize, and moderate stories. Relevant prompts, story context, player input, and generated output may be sent to DeepSeek and Cloudflare Workers AI. Cloudflare states that Workers AI customer content is not used to train or improve models or services without explicit consent. Do not submit sensitive, confidential, or regulated personal information that is not needed for your story.

4. When We Share Information

We do not sell personal information. We share information only as needed:

• With Cloudflare for hosting, storage, security, AI services, queues, and login email delivery
• With DeepSeek for AI text generation, Google for optional sign-in, Stripe for billing and fraud prevention, and Umami Cloud for privacy-focused traffic statistics
• With professional advisers or service providers subject to appropriate obligations
• When required by law, to respond to valid legal process, prevent harm or fraud, protect our rights, or complete a business transaction
• With your consent or at your direction

5. International Processing

Our providers operate in multiple countries. Information may be processed outside the country where you live. Where required, we use contractual and other safeguards for international transfers.

6. Data Security

We use reasonable technical and organizational safeguards designed to protect information. No online service is completely secure, so please protect your account and do not submit information you do not want processed by an online AI service.

7. Data Retention

We keep account, content, and play data while your account is active or as needed to provide the service. Login codes expire after five minutes and sessions expire or are revoked. Feedback is kept while it is useful for support and product improvement. Billing, security, moderation, and transaction records may be retained longer when needed for fraud prevention, disputes, accounting, or legal obligations. Deleted data may remain temporarily in restricted backups until those backups are replaced.

8. Your Choices and Rights

Depending on where you live, you may request access, correction, deletion, restriction, objection, or a portable copy of your personal information, and may complain to your local data protection authority. Send requests to the address below. We may verify your identity. Some records may be retained or de-identified when required for billing, security, legal claims, or other legal obligations.

9. Cookies, Storage, and Analytics

Required cookies and local storage maintain login, security, language, navigation preferences, and the guest usage allowance. TaleRun uses Umami Cloud without advertising cookies to measure page views, URL search parameters, referrers, campaign parameters, browser and device categories, and approximate country. Story text and player input are not sent to analytics services.

10. Children

TaleRun is not intended for children under 13. If you are under the age of legal majority where you live, use TaleRun only with permission from a parent or guardian. Contact us if you believe a child has provided personal information in violation of this section.

11. Changes to This Policy

We may update this policy as TaleRun changes. We will update the effective date and provide additional notice when required by law or when a change materially affects your rights.

12. Contact Us

Contact TaleRun with privacy questions or data requests:

contact@talerun.com