Privacy Policy

1. Who We Are and What This Covers

This Privacy Policy explains how Novarrium ("Novarrium", "we", "us", or "our") collects, uses, shares, and protects personal information when you visit novarrium.com, create an account, or use our worldbuilding and novel writing platform, which uses language models (the "Service"). Novarrium is the controller of the personal information described here. Capitalized terms not defined here have the meaning given in our Terms of Service.

2. Information We Collect

Information you give us

• Account information: email address, password (stored only as a hash), username, display name, and if you sign in with Google, the name, email, and profile image Google shares with us.
• Your Content: the projects, chapters, outlines, characters, worlds, story-bible entries, prompts, uploaded manuscripts and images, and editing history you create or import.
• Billing information: your plan, purchases, credit balance, and transaction history. Card details are collected and stored by Stripe, not by us; we receive a token, the card brand, and the last four digits.
• Communications: messages you send to support, feedback you submit, and your marketing preferences.

Information collected automatically

• Usage data: the features you use, generations you request, pages you view, and the timing of those actions, recorded in our own database.
• Time zone: when you are signed in, the app reads your browser's time zone name (for example America/Chicago) and saves it to your profile. We use it only to decide what time of day to send you email. It is not sent to any analytics tool.
• Email engagement: for the emails described in Section 3, whether each one was delivered, opened, or clicked, whether it bounced or was marked as spam, and the hour of your day it was sent. When you follow a link from one of our emails, the link carries campaign tags (utm_source, utm_medium, utm_campaign) and we record that visit in our own usage records.
• How you found us: on your first visit we keep the campaign tags in the address, the Google Ads click ID, the referring page, and the landing page in your browser's local storage for up to 30 days, and save them to your account when you sign up.
• Technical data: IP address, browser and device type, operating system, language, referring pages, and identifiers set by cookies or similar technologies.
• Error and performance data: crash reports and error logs, which can include the request that failed and technical context about your session. When you are signed in, error reports include your account ID and email address so we can follow up. If you allow analytics cookies, our error monitoring (Sentry) also keeps short recordings of how a page behaved, for a sample of visits and for visits where an error happens, including inside the app. These recordings mask all text and block images and media, so they show the layout and clicks, not your words. Without that permission, errors are still reported but nothing is recorded.
• Consent records: when you accept our Terms and this policy we record the versions accepted, the time, your IP address, and browser information as evidence of agreement.

Information from others

We receive payment and dispute information from Stripe, sign-in information from Google if you use Google sign-in, and campaign information from advertising platforms about how you reached us.

3. How We Use Information

• To provide, operate, and support the Service, including generating text and images from Your Content.
• To create and manage your account, process payments, apply plan limits, and maintain billing records.
• To send account and security notices, receipts, the trial-ending notice, the inactive-account warning, and responses to your requests.
• To send the few product emails described below, which you can opt out of at any time using the link in each message or in Settings.
• To measure and improve the Service, understand how features are used, and fix bugs.
• To detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms.
• To comply with law, respond to lawful requests, enforce our Terms, and defend our legal rights, including in billing disputes.

The email we send

• Automated emails: a welcome email once after you sign up; a "where you left off" email about a week after your last saved change, only if you have started writing and never more than once in 30 days; and one notice about two days before a free trial ends.
• Limits: no more than three automated emails in any 30 days, and never two within 24 hours.
• Other email: the inactive-account warning described in Section 7, an occasional announcement such as our launch, and a personal note if we need to tell you about a problem we fixed. These are not counted in the limit above. Sign-in and password email comes from our authentication provider (Supabase) and receipts and payment notices come from Stripe.
• Timing: apart from the welcome, these emails go out between 3 p.m. and 9 p.m. in your time zone, or between 15:00 and 01:00 UTC if we do not know it.
• Open and click tracking: our automated emails and announcements may contain a small image that tells our email provider (Resend) when the email is opened, and links that pass through Resend before taking you to the page. We use this to see which emails are useful and what time of day works. Some email apps open images automatically, so an "open" does not always mean you read it. You can block open tracking by turning off remote images in your email app.
• Unsubscribing: every email has an unsubscribe link that works without signing in, and you can also turn email off in Settings. Unsubscribing stops these emails; sign-in, password, and payment email still arrive because they are needed to run your account.

4. How Model Providers Process Your Content

When you ask the Service to draft, check, or illustrate something, the relevant parts of Your Content (for example a prompt, an outline, a character profile, or the chapters needed for context) are sent over encrypted connections to our model providers, which return the result. Today they are Anthropic (Claude language models) and Google (Gemini language and image models) for text and checks, and OpenAI for character portraits, maps, covers, story reel images and narration, and for measuring how similar drafted passages are to each other. If OpenAI narration is unavailable, reel narration text is sent to Microsoft's text-to-speech service instead. Those providers process the data under their API terms, which state that they do not use API inputs or outputs to train their models. We do not use Your Content or generated output to train models offered to other users. We may keep generation logs for a limited time to operate the Service, investigate problems, and enforce our Terms.

5. How We Share Information

We do not sell personal information for money. We share it in these circumstances:

Service providers (subprocessors)

Vendors that process data on our behalf under contract, only as needed to provide their service to us:

• Database, authentication, and storage: Supabase (United States).
• Hosting and background processing: Vercel and Railway.
• Language, image, and speech models: Anthropic, Google, OpenAI, and Microsoft (text-to-speech, only as a fallback for reel narration).
• Payments: Stripe.
• Email delivery, open and click tracking: Resend.
• Error monitoring and masked error recordings: Sentry.
• Analytics and advertising measurement: Google Analytics, Google Ads, Microsoft Clarity (session analytics), and PostHog (product analytics, United States).

We also use internal alerting tools that notify our team of new purchases and failures; those alerts can include your email address and are visible only to our staff.

Advertising and analytics partners

Google Analytics, Google Ads, and Microsoft Clarity set cookies or use similar technologies to measure our site and to show our ads to people who visited it. When you are signed in, Google Analytics also receives your account ID and plan name. Google Analytics receives the page path but not the rest of the web address, except the campaign tags that tell us which ad or email brought you. Microsoft Clarity records how pages are used (clicks, scrolling, and mouse movement) on every page, including inside the app, but the text of your story (the editor, outlines and plans, the Story Bible, character and world pages, and the reader) is masked before anything is sent, so Clarity never receives it. PostHog (hosted in the United States) provides product analytics: funnels, A/B tests, and session replay on our public pages only; we do not use it for advertising. When you are signed in, PostHog identifies you by your account ID only, never your email or name, and never receives your manuscripts, chapters, or Story Bible. Session replay masks all text and form inputs and is never recorded inside the product. If you are in the European Economic Area, the United Kingdom, or Switzerland, none of these load until you accept analytics cookies. Everywhere else they load unless you decline them in the cookie notice or your browser sends a Global Privacy Control signal, which we treat as declining. Some U.S. state laws treat this as "sharing" or "targeted advertising". You can opt out as described in Section 10.

Legal, safety, and business transfers

• To comply with law, a court order, or a lawful request, or to protect the rights, property, or safety of Novarrium, our users, or the public.
• To investigate or defend claims, including payment disputes and chargebacks, where we may share transaction and account records with payment providers, card networks, and banks.
• In connection with a merger, acquisition, financing, or sale of assets, in which case this policy will continue to apply to your information until it is changed with notice to you.
• With your direction or consent, for example when you export or publish your work.

6. Cookies and Similar Technologies

• Essential: keep you signed in, protect against fraud, and remember security settings. The Service does not work without them. This includes a cookie (nf_region) that records only whether your region needs consent before analytics load, and a local storage entry (nf_cookie_consent) that remembers your cookie choice.
• Preferences and first-party records: local storage entries that remember settings such as your editor layout, the campaign information described in Section 2 (up to 30 days, removed once saved to your account), and the time zone last saved for your account. If you allow analytics, error monitoring keeps its recording state in session storage, which is cleared when you close the tab.
• Analytics and advertising: help us understand how the site is used and measure advertising. These are provided by Google, Microsoft, and PostHog (which stores a ph_<key>_posthog cookie and a matching entry in your browser's local storage), and the same permission starts Sentry's error recordings. In the European Economic Area, the United Kingdom, and Switzerland they load only after you accept them in the cookie notice; elsewhere they load unless you decline or your browser sends a Global Privacy Control signal. You can change that choice at any time from the "Cookie settings" link in the footer.

You can block or delete cookies in your browser; blocking essential cookies will prevent you from signing in. You can also opt out of Google's use of cookies for advertising at adssettings.google.com and install the Google Analytics opt-out browser add-on.

7. Data Retention and Deletion

• While your account is open we keep your account information and Your Content so the Service works.
• When you delete your account in Settings, any active subscription is cancelled and your profile, projects, chapters, characters, and world data are deleted from our active systems promptly, normally at once and in any case within 30 days. Copies in routine backups are overwritten on their normal cycle, within 90 days.
• Inactive accounts. From November 20, 2026, an account that has had no activity for 6 months (180 days) and has no active trial or paid plan is deleted entirely: your profile, your sign-in, your stories, and everything else in the account. Before that date no account is deleted for inactivity. Signing in again restarts the count. Accounts with an active trial or paid plan are never deleted for inactivity.
• Former paying customers. If you have ever had a paid subscription or bought anything from us, the inactivity period is 12 months (365 days) instead of 6, and your stories are not removed earlier.
• Stories on a Free account. Stories in a Free account that shows as expired (its trial or subscription has ended) are removed after 120 days of inactivity, ahead of the account itself, unless you are a former paying customer. An ended trial that is not yet marked expired keeps its stories until the account itself is deleted.
• Warning first. We email the address on file before any of this. The warning says what will be deleted and on what date, and every deletion happens at least 30 days after it and not before the date it names. An account that was warned under an earlier version of this notice gets a new warning that names the account.
• Trial eligibility record. When we delete an account for inactivity we keep a one-way hash of its email address (a scrambled code, not the address), the date, and the reason, so a new account with the same email address cannot take another free trial. The hash is not anonymous: anyone who already has an email address can compute its hash and check it against ours, and we use it for nothing else. We keep it for as long as we need to prevent repeated trials.
• Time zone stays on your profile until it changes or your account is deleted.
• Email records (which emails we sent you, when, and whether they were delivered, opened, or clicked) are kept with your account so we can keep to the limits in Section 3.
• Billing and consent records (transactions, refunds, disputes, and records of your acceptance of our Terms) are kept for as long as needed for tax, accounting, fraud prevention, and the defense of legal claims, typically seven years, even after the account is deleted.
• Error logs and generation logs are kept for a limited operational period and then deleted.
• Aggregated or de-identified data that no longer identifies you may be kept indefinitely.

8. Security

We use commercially reasonable technical and organizational measures designed to protect personal information, including encrypted connections, hashed passwords, access controls, and hosting with providers that maintain their own security programs. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we learn of a breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law. You are responsible for keeping your password confidential and for the security of the devices you use.

9. Your Choices and Rights

Wherever you live, you can access and update your account information in Settings, export your finished book from the app (DOCX, EPUB, PDF or plain text, on every plan), opt out of marketing email, and delete your account. Depending on where you live you may also have the rights below. To exercise any of them, email NovelForge1@gmail.com from the address on your account; we may need to verify your identity, and we will respond within the time the applicable law requires.

10. U.S. State Privacy Rights (California and Others)

If you live in California or another U.S. state with a comprehensive privacy law, you may have the right to know what personal information we collect, use, and share; to access it in a portable form; to correct or delete it; to opt out of the sale or sharing of personal information and of targeted advertising; and not to be discriminated against for exercising these rights. The categories we collect and share are described in Sections 2 and 5. We do not sell personal information, and we do not knowingly sell or share the personal information of anyone under 16. We may share information with advertising partners as described in Section 5. That sharing happens through cookies set in your browser, which in the United States load unless you decline them. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out and these tools do not load unless you choose to accept them in the cookie notice. Otherwise the way to opt out is to decline analytics cookies in the cookie notice (or later via "Cookie settings" in the footer) and the browser and Google controls described in Section 6. Declining also stops PostHog and clears its cookie and local storage entry. For every other right listed above, email NovelForge1@gmail.com. If we deny a request, you may appeal by replying to our decision.

11. European and U.K. Users (GDPR)

Legal bases

• Contract: providing the Service you signed up for, including drafting, checks, images, and billing.
• Legitimate interests: securing and improving the Service (including error monitoring), preventing fraud and abuse, timing our emails to your time zone and measuring whether they are opened and clicked, and defending legal claims, balanced against your rights.
• Consent: analytics and advertising cookies, and marketing email, which you can withdraw at any time.
• Legal obligation: tax, accounting, and responding to lawful requests.

Your rights

You may request access to, correction of, deletion of, or a portable copy of your personal information, restrict or object to processing based on legitimate interests, withdraw consent, and lodge a complaint with your local supervisory authority. Our providers are located primarily in the United States; where we transfer personal information out of the EEA, the U.K., or Switzerland, we rely on the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.

12. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, contact NovelForge1@gmail.com and we will delete it.

13. Changes to This Policy

We may update this policy. When we do, we will change the version and effective date at the top, and for material changes we will also give notice by email or in the Service before they take effect. Your continued use of the Service after the effective date means the updated policy applies.

14. Contact

Privacy questions and requests, account and billing help: NovelForge1@gmail.com.