Privacy
What we hold
Your email address and a hashed password — we never see the password itself. The books you make and the record of which are yours. What you typed to describe them. How many books you have designed, so the free allowance can be counted.
Any picture you give us to draw a character or a place from — a drawing, or a photo, which may show a real person — for as long as it takes to draw that book, and no longer. We keep its pixels and nothing else: the place and the device a photo carries are removed when it arrives. It is used only to draw that one book, and every copy is deleted as soon as the book is built — or when you delete the design or your account, if it never is.
If you link a card, we hold an identifier Stripe gives us that says “the same card as before”, plus the last four digits and the brand. We never see or store your card number. Stripe holds the card.
Your IP address, briefly, so the rate limit can tell one visitor from another.
Who else sees it
What you write to describe a book, and any picture you give with it, is sent to OpenAI, which generates the text and the pictures. Payments go through Stripe. Email is sent through Resend. Those three, and nobody else. We do not sell anything to anyone, and there is no advertising on this site.
Cookies
One, to keep you signed in. There is no advertising cookie and no tracking cookie of any kind on this site, which is why you were never asked to accept anything.
How we count visits
We count how many people read each page, and nothing is stored on your device to do it. No cookie, no identifier, no profile. To tell two readers apart on the same day we keep a one-way hash of your address and browser mixed with a secret that changes at midnight — so today’s count cannot be joined to tomorrow’s, and your address is never written down. We also keep the page you read, the site you arrived from, and your country — never a city, never a search term. You cannot be identified from any of it, which is why it needs no consent banner.
Your rights
You can delete your account yourself, at any time, from your account page. It removes your books and their files, your covers, your support threads and your sign-in, immediately and for good. Records of payments and refunds are kept for accounting with your name and address removed, which is what the law requires of us in the other direction.
For a copy of everything we hold about you, write to us and we will send it. If you are in the EU or the UK, both of those are your rights under the GDPR; we would do them anyway.