Privacy notice

Product analytics is optional and separate from advertising. When you allow Product analytics in Privacy choices, we use PostHog to measure page visits, quiz step completion, elapsed time, results/email/plan steps, checkout errors and server-verified initial purchases. Random visitor/session identifiers connect these steps without sending your email, name, quiz answers, story content, passwords, card details or private result links. We send only allowlisted campaign tags, coarse device/browser categories, public route names and purchase amount/currency. No automatic DOM capture or session recording is enabled. Analytics consent lasts up to 180 days; active visit records last up to 30 days, checkout attribution up to 7 days and delivery/deduplication records up to 30 days, cleaned during later processing. Change or withdraw consent using Privacy choices. Withdrawal stops new collection and removes pending events for this browser identifier; events already delivered are subject to PostHog processing at https://posthog.com/privacy. Global Privacy Control also disables product analytics. Funnel reports cover consenting tracked visitors and can miss blocked requests or other devices.

Advertising measurement is optional. We load the Meta Pixel only after you choose Allow advertising in Privacy choices. You can reject advertising and use Lorewish, or change your choice using the Privacy choices link in the homepage footer. With permission, Meta receives page/quiz milestones, registration and checkout events, purchase totals/currency, browser identifiers and device/network information. We do not send story text, quiz answers, email, passwords, private results links or profile details in advertising events. We send verified initial Polar purchases from our server using Conversions API when configured, using a matching event identifier to avoid counting a browser/server purchase twice. Consent choices last up to 180 days. Server checkout attribution expires after 7 days; advertising event records are removed after 30 days during routine processing. Revoking consent stops future browser events and removes pending server events for your signed-in account or current guest checkout session; data already sent to Meta is governed by Meta’s privacy policy at https://www.facebook.com/privacy/policy/. Global Privacy Control disables advertising tracking.

Lorewish is operated by HOHAMON TECHNOLOGY HONG KONG LIMITED at Unit 2202, 22/F, Causeway Bay Plaza I, 489 Hennessy Road, Causeway Bay, Hong Kong. Privacy questions and deletion requests: support@hohamon.com.

Guest reading progress, bookmarks, reader theme and font settings are stored in your browser. For signed-in readers, we store sample story identifiers, saved bookmarks, the current scene and reading path with your account to support reading across devices. Guest progress is not automatically imported. Onboarding answers are saved in your browser. When you choose Email my results, we store your email and quiz answers and use Resend to send the requested email. Results links expire after 30 days; expired records are removed during routine cleanup. The link lets anyone who has it view those quiz results, but does not sign in or grant Premium. This step does not subscribe you to marketing or create an account. Guest AI stories use a secure, HttpOnly 30-day session cookie. AI stories created while signed in are associated with your account so you can resume them across devices using that account. We store signed-in generated stories and their choices until you delete them. Unclaimed guest stories expire after 30 days. Guest AI stories join your account only after you explicitly choose Add these stories to my account; signing in alone does not import them. Delete a story in Your AI stories; clearing cookies may remove your ability to access guest stories.

Creating or continuing a story sends your idea, character settings, story context and selected choices to our AI provider, Anthropic or OpenAI. Avoid including sensitive personal information. Device narration uses your device speech system. When you choose to generate AI audio for a saved chapter, we send that chapter text to ElevenLabs. Generated clips are private to the story owner, and audio access expires with the story; expired cached clips are cleaned up on later service requests. Additional character and service-capacity limits may apply to AI audio.

When you sign in with ChatGPT, the hosting platform provides an account identifier and email address. We use the identifier to associate your sample reading library, signed-in AI stories, subscription purchases and account usage limits. Signed-in sample reading data stays associated with the account until you change it or request deletion. Saved story drafts, reusable character descriptions, world rules and profile details are private to your account. Removed studio items are hidden immediately and retained for up to 30 days for support-assisted recovery. Contact support to request deletion or recovery. Signed-in AI stories are available across devices using that account until you delete them. Existing guest AI stories are added only after your explicit choice, never automatically when you sign in.

You can begin checkout using your email without creating an account. A secure HttpOnly cookie identifies your checkout browser for up to 30 days. After payment, create or log in to an account and verify the same email to claim Premium. Knowing an email address alone never grants access; verified billing records and account email ownership are required. Checkout-to-account linkage is retained with billing records for support, renewal and refund handling. Polar processes checkout, payment details, billing information and subscription management as Merchant of Record. We store Polar transaction, customer and subscription identifiers, the selected plan, payment status and paid access dates. Card details are entered in Polar checkout and are not stored by Lorewish. We retain billing records as needed to provide paid access, handle support and meet applicable recordkeeping obligations. Polar explains its own processing at https://polar.sh/legal/privacy-policy.

We process limited request, session and usage data to prevent abuse and enforce daily limits. Hosting and database processing are provided through Sites and Cloudflare; the AI service also uses a Google Cloud backend. Contact us to request access or deletion of information associated with your account, subject to required billing record retention.