Privacy notice

What we store

Your account

• Your email address and the account name you sign up with.
• Your password, stored only as a secure hash. We cannot read it.
• Sign-in sessions: a session token, when it expires, and the IP address and browser details it was created from, to keep accounts secure.
• Short-lived counters that limit how often anyone can try to sign in or sign up.
• A security log of account events, such as sign-ins, password and email changes, data downloads and deleted saves. It holds ids and, where we can tell, a scrambled form of your IP address, and is kept for 180 days.

Your game

• Your saves: your character, their stats and items, where they are, and a running summary of the story.
• Your turns: the action you chose or typed, the dice results, and the narration the AI wrote. The play screen shows recent turns; older ones stay in the save until you delete it.
• Everything you type during character creation, such as your hero's name and the line about your old life.
• Feedback and bug reports you send, including any linked adventure; panels you report, with the reason you give; and panels our safety checks flag.
• How many turns, new characters and AI requests you used each day and each billing period, to apply your limits.

Payments

• If you buy a plan or a turn pack, Stripe processes the payment on its own checkout and billing pages. Stripe receives your email address and the payment details you enter there, under Stripe's privacy policy, and may email you receipts.
• We store only your Stripe customer and subscription ids, your plan, its billing dates and status, and how many pack turns you have left. We never see or store your card number.

Who can see it

The people who run the site can open any account and save to review reports, investigate abuse and answer support requests, including the turns you typed and the narration. Each time they open an account or a page of a save, it is recorded in that account's security log. They can also suspend an account or change its daily limits; those changes are logged the same way.

What we send to the AI provider

The story is written by an AI model run by a third-party provider, reached through an OpenAI-compatible API. Each time the storyteller writes, we send it:

• the text you typed for that step: your hero's name, the line about your old life, or your action;
• your character's state and the dice results for the turn;
• the story so far, as a short summary and notes.

What you type may also be checked by the provider's moderation service to help keep the story safe for work. We do not send your email address, account name, password or IP address. The provider processes this text to generate the reply under its own terms, and may keep it for a limited time to operate its service. The provider is OpenAI, the company behind ChatGPT.

Please don't type personal information into the story.

Email

We email you only to confirm your account, to approve and confirm a new email address, to reset your password, and to tell you when your password or email address has changed, through our mail provider. No newsletters or marketing.

One optional letter is off by default: if you turn it on from your account page, we send one plain email with your hero's name and a link back to the game when your newest adventure has waited three days, at most once until you play again, and you can turn it off there at any time.

Cookies and scripts

We use a sign-in session cookie to keep you logged in. We also use Google Analytics on the production site to understand visits and how people use the site. Google Analytics uses cookies and receives usage information such as page views, browser and device details, and IP addresses. Advertising personalization and Google signals are disabled in our tag configuration. See Google's privacy policy for how Google processes this information.

The sign-up and forgot-password forms may show a Cloudflare Turnstile check to keep bots out. When they do, that check loads from Cloudflare and runs under Cloudflare's privacy policy. Google Analytics also loads a third-party script from Google.

How long we keep it

• Your account and saves are kept until you delete them.
• Deleting a save from your adventurers page deletes its turns and reports too.
• Sign-in sessions and email links expire on their own. Daily and billing-period usage counts are deleted after 90 days.
• Deleting your account deletes your Stripe customer record, which cancels any subscription. Stripe keeps records of past payments as the law requires.
• The security log is kept for 180 days, including after you delete your account (see below).

Downloading, changing and deleting your data

When you are signed in, your account page lets you:

• change your password or email address (a new address only takes effect once you approve it from your current address and then open the link we send to the new one);
• see where you are signed in and sign out other devices;
• download a copy of your data as a JSON file: your account details, every save with all of its turns and narration, the reports you filed and the flags our safety checks raised on your account, and your daily usage counts. It leaves out your password hash, sign-in tokens, the hidden dice seeds and the security log;
• delete your account. You confirm with your password. We immediately and permanently delete your account, your sign-in sessions, your saves and their turns, your reports and your usage counts, and sign you out. There is no undo.

After deletion, the security log keeps its rows (including one recording the deletion) until they reach 180 days, but they no longer point to your account: they hold no email or name, only event names and, where we can tell, a scrambled IP address. Our daily database backups may hold deleted data for up to 14 days, until they are replaced.

If you cannot sign in, email us from your account's address and we will delete your account within 30 days. You can also ask us to correct your data. Depending on where you live, you may have further rights under laws such as the GDPR or CCPA; contact us to use them.

Children

Fractured Choices is for players aged 13 and over (see the Terms). If we learn that an account belongs to someone younger, we will delete it.

Changes and contact

If this notice changes in a way that matters, we will update the date at the top and say so on the site. Questions or requests: justin@nealey.pro.