We take the protection of your personal data seriously. This policy explains which data we collect, why we collect it, and how we handle it.
1. Controller
Agape Digital UG (haftungsbeschränkt)
Von-der-Horst-Straße 5, 24118 Kiel, Germany
The controller responsible for data processing on this site is Agape Digital UG (haftungsbeschränkt), Von-der-Horst-Straße 5, 24118 Kiel, Germany. Contact details are listed in the imprint.
2. Data we collect
Account: email address, hashed password, display name (optional), subscription tier, Stripe customer and subscription IDs. Content: characters, journeys, scenes and generated prompts you create. Technical logs: IP address (rate-limiting only, not stored long-term), user agent.
3. Hosting
This website is externally hosted. Personal data collected on this site is stored on the servers of our hosting provider. Legal basis: Art. 6 para. 1 lit. b GDPR (contract performance) and Art. 6 para. 1 lit. f GDPR (legitimate interest in reliable service delivery).
4. Purpose and legal basis
We process your data to operate the service, authenticate users, process subscription payments via Stripe, and prevent abuse. Legal basis: Art. 6 para. 1 lit. b GDPR (contract) and lit. f GDPR (legitimate interest in security).
5. Service providers (processors)
Stripe, Inc. (payment processing), our hosting provider, optionally Upstash Inc. (rate limiting). Data processing agreements are in place where applicable.
6. Fonts
This site uses Google Fonts served locally via Next.js. No requests are made to Google servers at runtime — your IP address is never transmitted to Google.
7. Data retention
Your data is stored as long as necessary for the stated purpose. Account data is deleted upon account deletion. Server logs are not persisted. Upon a justified deletion request or withdrawal of consent, data is erased unless we have other legally permissible grounds for retention.
8. Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object (Art. 21 GDPR). To exercise these rights, contact us at the address in the imprint.
9. Right to lodge a complaint
You have the right to lodge a complaint with the supervisory authority responsible for your place of residence, workplace, or the location of the alleged infringement.
10. Adult content
If you enable the 18+ workflow, your age confirmation is stored alongside your account. Generated prompts remain text-only and are stored under the standard data category.
11. Cookies
This site uses technically necessary cookies (authentication session, Stripe payment) and, with your consent, analytics cookies (e.g. Google Analytics). Necessary cookies are used on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest); analytics cookies are used only on the basis of Art. 6 para. 1 lit. a GDPR (your consent). You can revoke consent at any time by clearing your browser's local storage or via the cookie notice shown on first visit.