WyrdWeaver Beta
Privacy Policy

Last Updated: February 9, 2026

This Privacy Policy describes how WyrdWeaver collects, uses, and protects your personal information when you use our AI-powered storytelling platform.

1

Information We Collect

We collect the following types of information when you use WyrdWeaver:

👤
Account Information
Email address, username, and authentication credentials (hashed passwords, 2FA settings)
📋
Profile Information
Display name and account settings
📖
Story Data
Character sheets, story narratives, game logs, and world-building content you create
📊
Usage Data
IP addresses, browser type, device information, and access timestamps for security and analytics
💳
Payment Information
Billing details processed securely through our payment providers (we do not store full credit card numbers)
💬
Communications
Support tickets, feedback submissions, and correspondence with our team
2

How We Use Your Information

We use your information for the following purposes:

🎮
Platform Services
Providing and maintaining the storytelling platform and AI game master services
💳
Billing
Processing payments and managing subscriptions
Personalization
Personalizing your gaming experience and story recommendations
📧
Communications
Communicating with you about your account, stories, and platform updates
🛡️
Security
Ensuring security, preventing fraud, and complying with legal obligations
📊
Analytics
Analyzing usage patterns to enhance user experience
🤖

AI Processing and Data Usage

WyrdWeaver uses third-party AI providers to generate story content. Whether your content may be used for model training depends on which AI model you use, not your subscription plan.

!
Free/Chat Model
The free chat model may use submitted content for training or model improvement, in accordance with the AI provider's policies. This is the only model available to free plan users. Paid users can also choose to use this model.
Paid/Fast Models
Paid fast models (available to paid subscribers) do not use submitted content for training or model improvement, based on our agreements with AI providers. However, data handling practices depend on the specific AI vendor's policies.
Important: While we make every effort to select AI providers with appropriate data handling practices, we cannot provide 100% guarantees. AI providers' policies may change, and different vendors have different data usage terms. You can review each AI provider's privacy policy on the OpenRouter terms page.
We do not train proprietary AI foundation models using user-generated story content.
Any internal analysis performed by WyrdWeaver is limited to aggregated, de-identified data for quality assurance, safety, debugging, and platform performance.
3

Information Disclosure

We may disclose your information to the following parties under specific circumstances:

Service Providers
Trusted third-party vendors who assist with hosting, payment processing, email delivery, and analytics. These providers are contractually bound to protect your data.
AI Service Partners
Content you generate may be transmitted to third-party AI service providers (such as OpenRouter) solely to generate responses. Data usage policies depend on which AI model you select: the free chat model may use content for model training/improvement, while paid fast models do not use content for training. These providers act as independent data processors and handle data in accordance with their own privacy policies. Please refer to Section 2 for complete details.
Legal Authorities
When required by law, court order, or to protect our rights, property, or safety.
Business Transfers
In the event of a merger, acquisition, or sale of assets, user information may be transferred with notice.
We do not sell your personal information to advertisers or data brokers.
4

Method of Disclosure

Information is disclosed through secure methods including:

🔒 Encrypted API connections with TLS 1.3
📡 Secure data transmission protocols
📄 Contractual data processing agreements
🎭 Anonymization before sharing with analytics
🛡️ Limited access controls for sensitive data
5

Security Practices

We implement the following security measures to safeguard your information:

🔐 Encryption
All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
🔑 Authentication
Secure password hashing (bcrypt), optional two-factor authentication (2FA/TOTP), and backup recovery codes
👥 Access Controls
Role-based access control (RBAC), principle of least privilege, and regular access audits
🗄️ Database Security
Secure database connections, parameterized queries to prevent injection attacks, and regular security patches
👁️ Monitoring
Automated threat detection, rate limiting, CSRF protection, and security headers (CSP, HSTS, X-Frame-Options)
🕒 Data Retention
Personal data is retained only as long as necessary for service provision or legal compliance
🚨 Incident Response
Documented breach response procedures and user notification protocols
6

Your Rights

You have the following rights regarding your personal information:

👁️
Access
Request a copy of your personal data
✏️
Correction
Update inaccurate or incomplete information
🗑️
Deletion
Request deletion of your account and associated data
📥
Export
Download your story data from your character sheet
🔕
Opt-out
Unsubscribe from marketing communications
To exercise these rights, please visit our contact page.
7

Cookies and Tracking

We use cookies and similar technologies for:

🍪 Session management and authentication
⚙️ Remembering your preferences and settings
📈 Analytics to improve our platform
🛡️ Security purposes (CSRF tokens, fraud prevention)

You can manage cookie preferences through your browser settings. Essential cookies required for platform operation cannot be disabled.

8

Children's Privacy

WyrdWeaver is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us immediately and we will delete such information.

9

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place, such as standard contractual clauses, to protect your information during such transfers.

10

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date. For significant changes, we may also send you an email notification.

11

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please visit our contact page.

ACKNOWLEDGMENT

BY USING WYRDWEAVER, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO THIS PRIVACY POLICY.