Privacy Policy

Last updated: August 26, 2026

1. What Data We Collect

When you use Cogweald, we collect the following data when you register and sign in:
Your email address (used for account identification).
The password you choose is stored as a one-way hash — we cannot see it.
The worlds and character settings you create while using the Service.
Story data generated by the Service, including characters, chapters, plot threads, and creator hints.

We use your email to identify your account.
We store your worlds and characters in our database so you can read your story's chapters.
We send story context (characters, plot threads, recent chapter summaries, and creator hints) to OpenAI models to generate chapters.
We record LLM token usage per analysis call for cost observability and monitoring only — this telemetry does not gate features or deduct credits.
We do not sell your data or use it for purposes unrelated to the Cogweald service.

Your data is stored in secure cloud infrastructure with strict access controls — only you can access your own worlds and story data.
Passwords are stored as one-way hashes using industry-standard algorithms — we cannot see your plaintext password.
Encryption keys are stored only in server-side environment variables, never exposed to the frontend or logs.
All connections between servers and the database use TLS encrypted transmission.

We share your data with the following third parties:
Supabase Inc.: Your account credentials (hashed password), worlds, characters, chapters, and story data are stored on Supabase for authentication and data persistence.
OpenAI: Story context (characters, plot threads, recent chapter summaries, creator hints) is sent to OpenAI models to generate chapters.
Lemon Squeezy: Your email and subscription info is shared for payment processing. We never see your credit card number.
We do NOT share, sell, or disclose your data to advertising networks, data brokers, or any other third parties.

Your worlds and story data are retained until you delete your account or request deletion.
AI-generated chapters, characters, and plot threads are retained in your account for reading and historical reference.
To delete all your data, please contact our support email — we will complete deletion within 30 days.

Cogweald does not use localStorage for tracking — only Supabase auth uses HTTP-only cookies for session state.
Supabase authentication uses HTTP-only cookies to store session information for maintaining login state.
We do not use third-party analytics tools (such as Google Analytics) or ad tracking.

Cogweald is not intended for users under 13 years of age.
If you are between 13 and 18 years old, please use this service with guardian consent.

This privacy policy may be updated periodically. For significant changes, we will notify you via email or website announcement.
Continued use of this service constitutes acceptance of the updated policy.

For any privacy-related questions or data deletion requests, please contact our support email.

This policy applies to all services provided by Cogweald (https://cogweald.com).