Privacy Policy

SinStories is an adult (18+) AI service that generates fictional stories. This Privacy Policy explains, in plain language, what personal data we collect, how and why we use it, who we share it with, and the rights you have. It applies to sinstories.app and the SinStories app.

Information you give us. To create an account you provide your email address; we sign you in with a one-time code we email to that address, so we never ask for or store a password. When you generate stories you provide prompts and choices, and we store those prompts and the resulting stories so they appear in your library. If you have a story read aloud, we store the generated audio alongside it so you can play it again.

Information we collect automatically. We record account and usage data needed to run the service, such as your remaining credits, plan and activity. For security and analytics we process technical data — your IP address (kept only as a one-way hash), the approximate country and city it maps to, and general device and browser information.

Payments. If you buy a paid plan, the payment is processed by our payment provider, Stripe, under its own privacy policy. Stripe handles your card details directly; we receive only limited information such as your subscription status and the last four digits — we never see or store full card numbers.

How we use your data. We use it to provide the service (generate and save your stories, produce read-aloud audio, run your account and credits), process payments and manage subscriptions, keep the service safe (moderation, preventing abuse and fraud), understand and improve the product, and send essential service messages. We never sell your prompts or stories, and we never hand them to anyone else to train their own AI models. We may use them ourselves — together with the ratings you leave on a story — to measure and improve the quality of our own writing, and only in a form stripped of anything that identifies you.

Legal bases (EEA/UK). Where GDPR applies, we rely on performance of our contract with you, your consent (for cookie-based analytics and any marketing), our legitimate interests (security, abuse prevention and improving the service), and compliance with legal obligations.

Cookies and analytics. We use essential cookies and similar browser storage to sign you in, keep your session, remember that you confirmed your age, and credit a sign-up to the partner who referred you. We also load Google Analytics and Google Ads on every visit; they set their own cookies and tell us how the site is used and which visits lead to a sign-up. We do not currently show a cookie banner, so these run from the moment you open the site — you can block or clear them in your browser settings or with an ad blocker, and the service works fully without them.

Sharing. We never sell your personal data and we don't share it with third parties for their own marketing. To run the service we pass data to providers working on our behalf: OpenRouter, which delivers your prompt to whichever AI model you chose to write with; ElevenLabs, which turns finished text into read-aloud audio; and our hosting, file storage, email delivery, payment and analytics providers. Each receives only what its job requires, and the provider behind the model you picked processes your prompt under its own terms. We also disclose data where the law requires it, such as a valid legal request.

Community. If you create an author profile, the pen name you choose is public: it appears on everything you publish, and because the Community can be read without an account, anyone with the link can see it — not only signed-in members. Choose the anonymous option if you would rather it did not. Everything submitted to the Community is reviewed by us before it appears. A published story can be read by anyone with the link and copied into the library of any signed-in member; taking it down removes it from the Community but not from copies made before that. Your email address is never shown. We also record which Community posts you open, which you heart and which you copy, tied to your account, so an author can be told how their story is doing; that record is kept for 100 days and your email is never shown to them.

Retention. We keep your account, your stories and their audio for as long as your account is active. You can delete your account and its data at any time by writing to support@sinstories.app; we delete it promptly, except for the minimum records we are legally required to keep, such as billing records. Beyond your account: detailed analytics events are kept for no more than 100 days and are then reduced to aggregate statistics that are no longer tied to an individual visitor; stories generated on the landing page without an account have their text deleted after about five weeks, though the prompt itself is kept in an anonymised form that carries no link to the person who wrote it; and the prompt stored with a generation attempt is removed after 60 days. Where a request is blocked by our safety rules we keep a record of that decision indefinitely, because the card networks require it, and the blocked text itself for one year.

Security. We protect your data with encryption in transit, hashed IP addresses and access controls. No online service can be completely secure, so we also encourage you to keep access to your email secure and your library off shared devices.

Your rights. Depending on where you live, you may have the right to access, correct, delete, export or restrict the processing of your data, to object to certain processing and to withdraw consent. California residents have the right to know about and delete their personal information and not to be discriminated against for exercising these rights; note that we do not sell personal information. To exercise any right, email support@sinstories.app.

Children. SinStories is strictly for adults. It is not directed to anyone under 18 and we do not knowingly collect data from minors. If you believe a minor has used the service, contact us and we will remove the account.

Changes and contact. We may process data in countries other than your own, using appropriate safeguards. We may also update this policy; the date above shows the latest version and we will flag material changes. For any privacy question or request, contact support@sinstories.app.