Privacy Policy
Last updated 2026-10-30 · by the Castfic team
In short: your first scene needs no account. Your characters and scenes are not read by people (unless one is reported or flagged as possibly illegal), not used to train AI, and you can delete everything in one click on My account.
What we store
- An account ID in a cookie on your device, so your characters and scenes come back when you return.
- If you sign in with Google: your email address and Google's account ID. Nothing else from your Google account — no contacts, no Drive.
- Your characters, scenes, rewrites and character memories, so you can continue and export them.
- Whether you passed the age check (a yes/no cookie,
cf_age— not your birth year). - Usage counters (scenes used) to apply free limits, and your Daily Scene streak.
- If you pay: Stripe handles your card — we never see it. We keep your Stripe customer ID and plan. A recovery key lets you move your account to another device.
- Safety logs: the category of any moderation flag and a one-way fingerprint of the text. Only for a suspected minor-related sexual block do we keep a short excerpt, for human review and legal reporting.
Who sees your scenes
- Nobody at Castfic reads private scenes, except when you report one, when someone reports a scene you shared, or when our system blocks content that may be illegal.
- AI providers: to play each line, the relevant character card and scene text are sent through OpenRouter to the model provider. We use providers that do not train on API traffic, and we turn off provider-side data retention where the option exists.
- Shared scenes are visible to anyone with the link and are never indexed by search engines. Unshare by deleting the scene.
We don't train on your writing
Your characters and scenes are never used to train or fine-tune any AI model, by us or by our providers.
Delete everything
On My account, “Delete everything” erases your account, characters, scenes, memories and shares at once. Deleted data is gone from our database immediately and from backups within 30 days. Payment records Stripe must keep by law stay with Stripe.
Analytics and cookies
We use Google Analytics 4 and a self-hosted Umami counter to count visits and which features are used (for example “scene started”, never the scene text). We use only the cookies needed to run the site and those analytics. No advertising trackers.
Children
Castfic is not for children under 13 (under 16 in the EU and UK), and we don't knowingly collect their data. If you believe a child has used Castfic, email hello@castfic.com and we'll delete it.
Your rights
Wherever you live, you can access, export (Markdown, Fountain, Word or character cards), correct or delete your data. EU/UK residents may also object to processing and complain to their data protection authority. California residents: we do not sell or share personal information.